'.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x2, @mcast2, 0x3}], 0x1c) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x0) 08:06:21 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCSABS20(r8, 0x401845e0, &(0x7f0000000040)={0x6, 0x9, 0x1000, 0x800, 0xffbe, 0xfffffeff}) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:21 executing program 3: r0 = userfaultfd(0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) userfaultfd(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0x6800) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x100, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000b99000/0x18000)=nil, 0x0, 0xffffffffffffff05, 0x25, 0x0, 0xffc8) r12 = dup2(r9, 0xffffffffffffffff) r13 = accept4(r6, 0x0, &(0x7f0000000140), 0x80000) setsockopt$RDS_FREE_MR(r13, 0x114, 0x3, &(0x7f00000004c0)={{0x1, 0x3}, 0x2d}, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) epoll_create1(0x0) r15 = socket$nl_crypto(0x10, 0x3, 0x15) r16 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x288000, 0x0) r17 = dup3(r16, r15, 0xc0000) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_NR(r17, 0x4008ae73, &(0x7f0000000100)={0x9, 0x2}) ioctl$UFFDIO_REGISTER(r12, 0x8010aa01, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:06:21 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)=r5) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500006a296d05fc5a419b6b02000000711018000000ce500000000000009500000000000000ddced81307ea9e1aae73cd4cf360a6139a31c601f5b0e9f3838906b56ae42f7fa78ff58b8324a45dc8fefe67cbd90e2f0e630391c8f72d3198744ce28dd57dcb5469e2747fd9a70b8ac79230e4f6f01d9a41e18a0e1d21b5"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 08:06:21 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x19eb7a2517197db1, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffed}) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x10a0, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) 08:06:22 executing program 0: gettid() r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000013) 08:06:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f81d9375d9901a2bafc14d9e400ba6276fd447988f50f4a86dc576cb7a87f00cbc75f945602495a59c150a1fbeeebbc8f52f07b7a30075288f68362d47cb7f60aaaafaf7e095cf38a56b51edf"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0xa9c, 0x7}) 08:06:22 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8, 0x200000) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f0000000980)={{0x0, @name="18f7226fcd5a49946b995b9d7b2638065747552e0fb355a23982006414d2b948"}, 0x8, 0x8, 0x40}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x62020, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="2c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303830302c646f6e745f6d6561737572652ce8f8c459085c17736d61636b6673666c6f6f723dc2066dd644ec01d752677f9c2d5fd0e7fa3d32003d2c00"]) r6 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000900)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x0, @local, 0x6}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000640)="a09914a1b6ba4bdd5ef390b26c15d0ed6550826fb3a4b292d3b65bb3f0865ba2cd73cc15c7ae22eb05147e7c084f986e43b7bb3de42cd5063b184df839342a5a890031dbca1353348e9a4da08eab973459bcd7501dfc5c2a75792396b67a35caa14128ae45e2455761e105bc3f0268b943695624dd8a530e406a04e6c5aa6abed69f07a8b26d730899bf13002a614a11ec933d515ddf7ea506530f2fd1f4", 0x9e}, {&(0x7f00000004c0)="f77e07503bbfec3fc09d192168e114f0526105d91b3e7b6972b8becf7fd524e04be2b314f08fa4ec3d68d265f9d90d450da988654eb5444b800facba1790d5b317db73d3cc441fd87794cf2adef4fc98c7c93692c386bd", 0x57}, {&(0x7f0000000240)="baa74f84d1800ac526ee05661fb0816110516a", 0x13}, {&(0x7f0000000700)="bf4695c91827da8ca40edaf0d9a8b89cc120a9742672d2fb2937bf74286893468afdcd0b4c811720d3b8e5e8082a85fabcf94671ee833ec4225275336b3e833217677da48aca65d0fa233b6322c5b4e20b2f04ef0b76ff2eb6a71c91385a3a0a3c4038569107e7da4c01b72684251ed6cc9292bdd26ff6eedcef901c2c15f88cd6be84620620e0fa30497cb608b55672766b854d444292d0223c7cfa14c9e3ecd16fdad33282abe7", 0xa8}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xd8}, 0x20000100) unlink(&(0x7f0000000940)='./file0\x00') 08:06:22 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect(r0, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x337}, {&(0x7f00000014c0)=""/134, 0x86}], 0x2}}], 0x8ae815e11353e9f5, 0x0, &(0x7f0000001780)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000001540), 0x28, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0xc2e846845196042a, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28, 0x2) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) 08:06:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 496.305616][T15311] sg_write: data in/out 808464396/6 bytes for SCSI command 0x30-- guessing data in; [ 496.305616][T15311] program syz-executor.1 not setting count and/or reply_len properly 08:06:22 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x3) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x10) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 08:06:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b000176006e0009040000010209bd00070581070001000000bf5253bb6fe8d33c07d7"], 0x0) syz_usb_disconnect(r3) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYPTR, @ANYRESHEX=r5], @ANYRES64=0x0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESHEX=r10, @ANYRESHEX]], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES64, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESDEC=r14, @ANYRESHEX=0x0, @ANYBLOB="3711473e941c58a2da55b5e491027f3ea84d571ab029fa", @ANYBLOB="8ec0315762d2d7bae0d8a9b61c704c7ce26fc7c0652191104bfe318ade64b8de8279ffb5a951e6f01c0c5c852e6da4c50c15bfb593f04f9bf52f7b989762c2f100ef72ca51af517c1dc7276c8c1142cdb8ffaee00e73e48304b52687a7701f40662d7a3e12a7cb3aa53f52ae08e3d90d54cbc01f8ec424c6acd847202c3453bff74647b2"], @ANYRESHEX=r8, @ANYRESDEC, @ANYRES32=r9, @ANYRESOCT=r10, @ANYRESHEX=r11, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRES32=r12], @ANYRES64], @ANYBLOB="26cd7ba563f0965dd788ec41ab56f3402f1ec975598f17ee3cca09e21585b2d097ee77d701f9acf6cac525324ccb1c4b828e0bf42dbf96e49b369aabe2405c196b8a2bc2f32240e1cfd5a16b9a55061d42e5d768efd715859b0a56e18dee562b3f7f9356b89d69607f4391835b7594d885627dd1d3d987aa9c7b0d84c716425adc57dd43ebc86fa54b88ee7ad05e46ecd2087d02d81a8dadb75c1b8e23a0cf2e1c0db9dcafbdd482a22a2ccfccc586aeccf0b480fe888c8586e383f3e504146835e57d2e0b27102d69db0d902b", @ANYRES16=r13], 0x0, 0x0, 0x0, 0x0}, 0x0) 08:06:22 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d6070000483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCGSW(r8, 0x8040451b, &(0x7f00000001c0)=""/165) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000040)) socket$inet6_dccp(0xa, 0x6, 0x0) 08:06:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3c7e, 0x0, 0x15, 0x8, "168aded1ff722d68efe42198ed9e03b63c2d83c179f88a268dd4b32f00f5d47aec92952a0eabb2833b56ed5b6dacf3031a0f6ac92eb2f318b3f1893cbcdf1f02", "ba7a2d6c73a15bd9983fa4d729ba8aea7f38ef70d5f3b8d22404f20487378c25", [0x7, 0x9a8c]}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1}, 0x0) [ 496.952568][ T50] usb 6-1: new high-speed USB device number 20 using dummy_hcd 08:06:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x22) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:23 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8fff7ff69a4f0ff00000000b70600000018d1fe2d6405000000000875040000000000000704000000000000b71f0000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf421feef0c6620cb8393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 497.212616][ T50] usb 6-1: Using ep0 maxpacket: 8 08:06:23 executing program 0: gettid() r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000013) 08:06:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100ab3bdaea10b8070a4227ab3500000109021200010034401c9e0964000000090448"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x0, 0x1, [0x4, 0x9, 0x7, 0x1, 0x100, 0x4, 0x39, 0xeb7b]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 497.354756][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.366162][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 497.379181][ T50] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 497.388493][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.432012][ T50] usb 6-1: config 0 descriptor?? 08:06:23 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) socket$kcm(0x10, 0x2, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0xced0d6cde078f1c3, 0x0, 0xc9fb2548}, 0x40000) [ 497.583205][T12560] usb 4-1: new high-speed USB device number 33 using dummy_hcd 08:06:23 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000008850000002f00009315ddd00774cdfa87aeb0acca0d00b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d30937306711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c034318508"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$audion(&(0x7f0000001700)='/dev/audio#\x00', 0xfff, 0xc00800) connect$rds(r6, &(0x7f0000001740)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x2, 0x7ccc01) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$xdp(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x0, r7, 0x37}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000001c0)="8c9f1059c57e8a7161b2a249635a1d586509ef4001e2277df5279e353b5ba5b67d3d1f4933679813324b219d", 0x2c}, {&(0x7f0000001440)="2d163517b6f661fc28cd1d44652914c05b628a9f366cbf929866ec9fec2123b225da1f832c1e256b2b7d8c488482155be7705b6ed6e0412b6ae13cd66cb73bbadb709a469ff3909f9043c83ac5a88bdee33f2c8887b8578e543674a73b65cfaea5e85e561d55935024d3c0acd4b1b84edb200e8baa4c941b36e3c69d0140392c04e9bab9fbc0c3c2d93815ab5c39c07e84566b195d277892b8665699dac2adad0ec51a42efe91bc166e7cda0c89c23098784796792c4b1f8da278699fd62a7435d1965f233f6", 0xc6}, {&(0x7f0000001540)="9d37b29350f488565bea4ee27e2a035389e4e8e730e12654e0ea2f5803cad3bdc0976d3419981715ce4c58fa944585092e2a1b8efa1717e683960422c4908ff1b85c97e34f71ee7defc38c4a74d7db4da89986cc0fd65ec1951551326fca36e9e12c6cfed30444d76ae8a11c5b4d6015762810768399651a6e5e9ebc04e22622b22efefe8bbcbb1256a5b9b1370aa472c2fd9ffc8882c7fabd9f835c8d9e94bb36b5e5ab5f87132b26b644dad2c843b56d2c246e40b0e2d3a14f6c7b03a8e971a5b23d2de4185aec04917bb2aafcbacada18277c96e9ba5a2528f3727fad33d98e970999ffd16e2f41f399d6b3115ccc34eb", 0xf2}, {&(0x7f0000001640)="89cde3fe26d79cf3b580a8b25497567868110a70816226ebd3d9a1e514872c366444a36667c8904247147a68bd1c08e2f4b303bb3319ac59d4209e7e168cfcf08b0c37704f38dbf46236402fa410fa68f7339e8249e61b77790c7bf67200cfc81b2ac22e8108a48e91d26de19be5d24bdc03eb60a56e16b1fa3b979b8476d058f05ca9e05a29a2fe82cb553c145d4bd2294fe2578da8d2249d", 0x99}], 0x5, 0x0, 0x0, 0x4000}, 0xc8086aea6240f4c8) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 497.822533][T12560] usb 4-1: Using ep0 maxpacket: 16 [ 497.942422][T12560] usb 4-1: unable to get BOS descriptor or descriptor too short [ 498.002455][T12560] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 498.010193][T12560] usb 4-1: can't read configurations, error -71 08:06:24 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000040)=""/218) 08:06:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x22) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 498.202614][ T50] usbhid 6-1:0.0: can't add hid device: -71 [ 498.209016][ T50] usbhid: probe of 6-1:0.0 failed with error -71 [ 498.256130][ T50] usb 6-1: USB disconnect, device number 20 08:06:24 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) [ 498.714293][T12560] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 498.902394][ T50] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 498.962238][T12560] usb 4-1: Using ep0 maxpacket: 16 [ 499.082545][T12560] usb 4-1: unable to get BOS descriptor or descriptor too short [ 499.142713][T12560] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 499.150663][T12560] usb 4-1: can't read configurations, error -71 [ 499.161903][T12560] usb usb4-port1: attempt power cycle [ 499.172297][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 499.292759][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.304029][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 499.317035][ T50] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 499.326240][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.337520][ T50] usb 6-1: config 0 descriptor?? 08:06:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x22) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd8, 0x6, 0xc1, 0x8, 0x110a, 0x1450, 0x83f0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x0, 0x21, 0x9a, 0x17}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000100)=0x80000001) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r10 = socket(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup3(r13, r14, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) setsockopt$RDS_CONG_MONITOR(r15, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) sendmmsg$inet_sctp(r10, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r12}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)={r12, 0xe86}, &(0x7f0000000080)=0x2dd) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r16, 0x0, 0x20}, 0xc) 08:06:25 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 08:06:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x480800, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000140)={'lapb0\x00', 0xffffffff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x300}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:06:25 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2, &(0x7f0000000340)=ANY=[@ANYRESOCT], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x2, 0x0, 0x0, 0x41000, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) lsetxattr$trusted_overlay_redirect(&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)='trusted.overlay.redirect\x00', &(0x7f0000000540)='./file0\x00', 0x8, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000400)={0x1f, 0x6b, &(0x7f0000000380)="f0f6d1b7bcd221178e4626065271194b93bc17be9e40261fc05117e1d7af5c516815bebc39988ed16908c707456f8d16f7a7c8c6a24084ae111c25e2f78e4935d28d8f9c7fe7fe915136578cfb5fb0e84ec40171ce5668c5dc5a240c9dc8ea5b0b39f7c7689717c1989954"}) r3 = socket$kcm(0x10, 0x2, 0x4) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000440)={'hsr0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r6 = signalfd(r5, &(0x7f0000000a00)={0x5}, 0x8) r7 = dup3(r4, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000580)={0x3c893b34, 0x2}) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) r12 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) accept$packet(r12, 0x0, &(0x7f0000000000)) fcntl$getownex(r12, 0x10, &(0x7f0000000080)={0x0, 0x0}) r14 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) accept$packet(r14, 0x0, &(0x7f0000000000)) r15 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r15, 0x9) ioctl$TIOCSISO7816(r14, 0xc0285443, &(0x7f0000000240)={0x9e, 0xffffff58, 0x3ff, 0x3, 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r15, 0x0, 0x1, &(0x7f00000003c0)='\x00', r16}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x12, &(0x7f00000001c0)='/dev/input/mouse#\x00', r16}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r13, r14, 0x0, 0x1, &(0x7f00000000c0)='\x00', r16}, 0x30) r17 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r16}, 0xc) pwritev(r17, &(0x7f00000009c0)=[{&(0x7f0000000740)="9d5b274a2049f5bcf1963523c7aeed606e7a7b3c40e7323b120d24ff1214bad26c9575e2148f3de563cf388a77486444c1832a64f922f7cc4d29cdbbf3addd38484b6363c88da0ed0fd46009c24c69c091fc2813b50669b8d959ab6c2e4125054ac9c7f405ad2f64d86e0f00cad17e6c2e6cc47852a0b7ef322e1bc816446f858d42b87489b116219dffc4cce99d70061aa681", 0x93}, {&(0x7f0000000800)="aac47233225f0aec4a0300366d4de1c6decd0ba87e267a8c7ff31afa1012e075928cd7bc0d041d400f45057d6415b85c9797e74cd0850547cdf93ad33db4bc1853baa91e6fee662d1e5ccd28b90c6ef1bbdc3517fb3c4230e0a2b2dde119a2df6166c1f7b998ebe28b915ed179713b1a2cef215ec703fea0f6486f7d8d642bfe9232b9b3757c7f0b69784bdd0ca45376e5eeaef32af668dba21262", 0x9b}, {&(0x7f00000008c0)="c14d992aa0ff1393915d62dc6bf5dfb7603cb8437c8a4c0d0163341172ea52245c8cc272184386d401ee89ba24a88207217b86ebbbd32ebeda05db71505b809a27bf318ff05088b11e1199fcb8e95995ca62a05c53c83cf10715f1f714510664a975e4d985c5f046645e187de4abd1be7823de1cb1367a57bff0385aecc659b07d48ba49ffdc9c1f5dc97cb2f423ec345104466c3e1d66d14893b4d82e15013f30f2b1c7120604827067fb3bc32725f8ec2a906cedbd41e13bd6ce6d6de56dbab4bdd1f4f22b1f6fbc06d1dbd1d2ef265728da31341b4502a8fa46576b1d5be3", 0xe0}], 0x3, 0x0) ioctl$GIO_UNIMAP(r11, 0x4b66, &(0x7f00000001c0)={0x2, &(0x7f00000000c0)=[{}, {}]}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="b5000000f5aac7e31d2a844542fa7182cb153627eed05d6d34b0eacde167d683c723fe22b05a30c917de631b990bca58edf5fc6f4aa2110c844b1fc1e7cf1786d1f4250b219488a07ed442c0c88f51a7aa30b1707f5f8569c0fa5c931e4ccb3f5766fba7f2281f6c8483e7e1c24bc59c45f8a009ea3a56891f334df60f00514a57838a7aaf5ef5902a0f24524a0d90aa2709b80eb43cde13f72c2baffe0d9e45eb82787ccaebfca0ed6a8099c9da99082b9b94aac613e5ed45"], &(0x7f0000000240)=0xbd) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000680)={r18, 0x1, 0x800, 0x4}, &(0x7f00000006c0)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x110, 0x900) 08:06:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="e401000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="bc0112000c000100697036746e6c0000ac010200140002000000000000000000000000000000000014000300fe80000000000000000000000000000008000700000000000800060000000000080006000000000008000800000000001400100026235e58cad1850f7229ff12de5fb0c314000200fe8000000000000000000000000000bb14000200fe8000000000000000000000000000aa140002003ac7d85d2b57aff87f52e359db35f2e6000011000000000008000200", @ANYRES32=0x0, @ANYBLOB="0800040000000000080005000000000008001400000000000800070000000000080008000000000008000600000000000800090029000000080008000000000000000300fe8000000000000000000000000000aa08000700000000000800080000000000140003000000000000000000000000000000000008001000000000000800040000000000080005000000000008001000000000000800020042ec13aefe34d11d885520289180ea61da018bab8d81c8a22c51327a1411de5b3ce5", @ANYRES32=0x0, @ANYBLOB="0800140000000000080012000000000004001300080014000000000008000f000000000008001200000000000800120000000000080014000000000008001100000000000800040000000000080004000000000001000f000000000008001400000000000800090029000000"], 0x1e4}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x400) write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x83, 0x1, 0x2}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCCBRK(r7, 0x5428) [ 499.782618][ T50] usbhid 6-1:0.0: can't add hid device: -71 [ 499.788879][ T50] usbhid: probe of 6-1:0.0 failed with error -71 [ 499.804577][T15402] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 499.812913][T15402] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 499.819221][ T50] usb 6-1: USB disconnect, device number 21 [ 499.821546][T15402] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 499.821577][T15402] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.5'. 08:06:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) unshare(0x400) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001e000503ed0080648c6394f20531d20006000f4009000500000000000000009700d0bdff0f0000000000", 0x2e}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x568, 0x278, 0x388, 0x110, 0x388, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, &(0x7f0000000800), {[{{@ipv6={@mcast1, @empty, [0xffffffff, 0xffffffff, 0x1584a9e3d989a75b, 0xffffffff], [0x0, 0xffffffff, 0x17f8001ff, 0x7f], 'bridge_slave_0\x00', 'bridge_slave_1\x00', {}, {}, 0xa9205354002808d0, 0x20, 0x4, 0x2}, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x9, @ipv6=@mcast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x67, @icmp_id=0x67}}}, {{@ipv6={@loopback, @local, [0x0, 0xff000000, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xff000000], 'veth1\x00', 'vxcan1\x00', {}, {0xff}, 0x11, 0x7f, 0x2, 0x50}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@ecn={0x28, 'ecn\x00', 0x0, {0x1, 0x1, 0x20, 0x50}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d3, 0x1, 0xfb}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0xa5db, @port=0x4e24}}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @gre_key=0x3, @gre_key=0x100}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, [0x7e7ffeff, 0xffffff00, 0xff, 0xff], [0x7f800000, 0x3fdb2f849a5d1b7c, 0xff000000, 0x1fffffe00], '\x00', 'team_slave_1\x00', {}, {}, 0x3a, 0xf7, 0x5, 0x2a}, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv6=@loopback, @ipv6=@empty, @port=0x4e24, @gre_key=0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b8, 0x368, 0x260, 0x260, 0x430, 0x160, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@inet=@multiport={0x50, 'multiport\x00', 0x1, {0x1, 0xc, [0x4e24, 0x4e22, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x4e24, 0x4e24, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e20], [0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0xffffffff, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x0, [0x4, 0x9, 0x8001, 0x8, 0x7, 0x5], 0x6, 0x8}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xa8}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x20, 0x3}}}, {{@ip={@multicast2, @remote, 0xffffffff, 0xff, 'nr0\x00', 'vcan0\x00', {0xff}, {0x101}, 0x62, 0x1, 0x43}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3ff, 0x0, @remote, 0x4e23}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x13}, @local, 0xff, 0xffffff00, 'ifb0\x00', 'team_slave_0\x00', {0xff}, {0xe07d8a2a98693684}, 0x0, 0x2, 0x80}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x9, 0x10100}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x618) 08:06:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) syz_usb_connect(0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) 08:06:26 executing program 4: r0 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001d80), 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x105000, 0x0) sendmsg$inet6(r1, &(0x7f0000001700)={&(0x7f0000000080)={0xa, 0x4e22, 0x8, @empty, 0x3}, 0x1c, &(0x7f0000001400)=[{&(0x7f00000000c0)="c07b82afbe180fbc76ffb9478aa5da8cccb31177375746bce33085d2353ab51b5401b446339375bf36fd2a54d282168c35d7bf", 0x33}, {&(0x7f0000000140)="c4b2fc247087a4a408b0d10d14393d52c068612ed8975139213e41bcb14c955ead971e90c0ccb056b91136599118ef40ff6ae9c19e4bd2c12d29e237761f2243e0ffaf25ad58443ae4a5b80b894cd448f49b6d2c0bfb193e2998190d72073a9ed5c26e9f749a10392cfad7ae564d7229a715b19b9f75b284157ee726256c4c8d663ba311dd44", 0x86}, {&(0x7f0000000200)="220277aea101980bcfcee12a4a047d1fc731d05d9f548db64e0c7e6682ea3a5d4903b20182fb71d6f5c79c6fac388ccadf7b5ae6973b3dbee1dd81770a7cf42abf0b56c80d4ff231b41548df117e50f1cad8f150a7b02483ee0a06054eebb83cc4c009a38198c7f25595203fb4bbe1c524f48f7f7a890ee8a5fa02238309de", 0x7f}, {&(0x7f0000000280)="b110233338bfb016f8871e5375434285cbb589cf04", 0x15}, {&(0x7f00000002c0)="8ba365fb017cd7b648e142e0e6ab0be1df9010f23e327cf2a27c3bc37b1d0d5d4f68ed883b57104d3146160ccc4f580d2a76a56ff4325a81a93336a26f5aa9a37beecb02182d8d77ff8a32acc5dc85190524db671bd35155eebf1f7b618b9b4df4a660ceca9cd727ebd1b775b6855f3b0c4a9cd4c7bb1ccffdf8cc76beab9a5a1604b22c2a1889ecdc9f2f58ce91c4b364c6601540f4a40c7489324dc4ac2213338f1cd590c24b847426b89eecc17c88e0", 0xb1}, {&(0x7f0000000380)="fbdb00e2b434b55bdd837c9e8c204d69953f8758e4128be3c64264634ea3208d25ab693c0492dda0fa9dbf5a0074972aab87a595ada4ce8189aeb21d26", 0x3d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="bfed31b04fb228329997d6332d52bc7799ad605dc1ef7f46a902ffd39ff8d3d2d218ba1c5c59df36f8471c8cffa36cbabac36c9f1391738278731a3c", 0x3c}], 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="c8010000000000002900000004000000293600000000000004010007d0986382678b10444a3281e0ab157e4160ff1c7b4008069f26e60f94d4b3ed1c5a5cc94031613e8ad80abd8ab1ad21edd44fff5cd28dccaea0c22443a8872155ca77359674632d6ddf656247ebfc57bd57e709dcb13df877366faec1d3a2fcb4a5146559a164b9e9c857dc6d7288f6feb6869650be7290f32619adcb128f25de7447b1834fa5e95b0016eb54237609d789345163f1171ec20e8bcec043a1eb2430c30884a0eb53f922aba1971c529b9756809c35a06ee5e7c9d87ed99e867cbf531c00010006b540a50121c1532fb5b5e091947d93652a4def1c452301cce495df7311ded9969db84b59b9048da31767cb30c6a6becd00ea99b36e63f89a8ab1e1a8ab534e8b04ec245763f21cde706a23af93b466a9256c8d565900ecec4669fb5a4147345bdf9fb80907c757b6704cf7d6f5954f42d3970689cb4644895990659c2262ee185c2c6c7150e1e13371a8c57ac3ec85f5d2413b0f4602e89df447a69e400bab75de012d6cd8bf81948eabb9968f6ed2423f62883f3e71000100c91000000000000000000000000000000000010400000000c20400000002280000000000000029000000360000001d01000000000000040120010500000000000000000000001400000000000000290000000b000000000000010000000068000000000000002900000039000000000a01d400000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbff01000000000000000000000000000100000000000000000000ffff0000000000000000000000000000000000000001"], 0x270}, 0x800) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$TCGETX(r2, 0x5432, &(0x7f0000001780)) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0xb, {0x7f, 0x4, 0x7, 0x8}, {0x18000, 0x10001, 0x0, 0xf70b}, {0x101, 0xfd}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSTI(r5, 0x5412, 0x6) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000017c0), &(0x7f0000001800)=0x8) [ 500.006798][T15411] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.032408][T12833] usb 3-1: new high-speed USB device number 40 using dummy_hcd 08:06:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000), 0x8) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.176581][T15422] input: syz0 as /devices/virtual/input/input14 08:06:26 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe000000008d0000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909b99396c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x5, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80}, 0x10}, 0xfffffffffffffd34) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000080)) [ 500.257118][T15424] input: syz0 as /devices/virtual/input/input15 [ 500.272825][T12833] usb 3-1: Using ep0 maxpacket: 8 08:06:26 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7, 0x2, [0x3a4, 0x4]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={r6, 0xfffb, 0x6, [0x9, 0x101, 0x20, 0x4, 0x200, 0xf86]}, 0x14) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="6110fb4aa0ffff17140000001d00814cb9d901631904", 0x16}], 0x1}, 0x0) syz_usb_connect$hid(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x0) [ 500.382328][ T12] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 500.394861][T12833] usb 3-1: config 0 has an invalid interface number: 177 but max is 0 [ 500.403273][T12833] usb 3-1: config 0 has no interface number 0 [ 500.409564][T12833] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=83.f0 [ 500.418948][T12833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.456921][T12833] usb 3-1: config 0 descriptor?? 08:06:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 500.649318][T15440] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 500.649318][T15440] program syz-executor.1 not setting count and/or reply_len properly [ 500.772616][ T12] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 500.780927][ T12] usb 6-1: config 0 has no interface number 0 [ 500.787397][ T12] usb 6-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=1e.19 [ 500.796667][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.806659][ T12] usb 6-1: config 0 descriptor?? [ 500.847113][ T12] uvcvideo: Found UVC 0.00 device (174f:5212) [ 500.854313][ T12] uvcvideo: No valid video chain found. [ 500.982903][T12833] mxuport 3-1:0.177: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 500.991889][T12833] mxuport: probe of 3-1:0.177 failed with error -5 [ 501.002918][T12833] usb 3-1: USB disconnect, device number 40 [ 501.045330][ T12] usb 6-1: USB disconnect, device number 22 [ 501.752247][T12833] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 501.822260][ T50] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 502.012285][T12833] usb 3-1: Using ep0 maxpacket: 8 [ 502.132464][T12833] usb 3-1: config 0 has an invalid interface number: 177 but max is 0 [ 502.140996][T12833] usb 3-1: config 0 has no interface number 0 [ 502.147467][T12833] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=83.f0 [ 502.156743][T12833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.166489][T12833] usb 3-1: config 0 descriptor?? [ 502.202567][ T50] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 502.211056][ T50] usb 6-1: config 0 has no interface number 0 [ 502.217457][ T50] usb 6-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=1e.19 [ 502.226792][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.240204][ T50] usb 6-1: config 0 descriptor?? [ 502.287036][ T50] uvcvideo: Found UVC 0.00 device (174f:5212) [ 502.294217][ T50] uvcvideo: No valid video chain found. 08:06:28 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000d0d9d08720c140088d10000000109021b00010000000009040000011d7ca70009050200000000d651"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 08:06:28 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') read(0xffffffffffffffff, &(0x7f00000002c0)=""/106, 0x6a) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f070f01c80f011a643ef20f00d8f30f0936d9ec36660f388085000066b96d08000066b8dc546e6b66ba7ac4ab4d0f300f01ca0f015c00", 0x37}], 0x1, 0x20, &(0x7f0000000200)=[@flags={0x3, 0x10}, @dstype0={0x6, 0x7}], 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:28 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x800000007}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x3ff, 0x3, 0x51, 0x20, 0x4, "e172b1a7d0410780d2e1863b3d3e105340e589", 0x81, 0x8}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x2ba, &(0x7f0000000100)}], 0x492492492492805, 0x0) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x6, 0x101040) write$9p(r4, &(0x7f0000000180)="a353e73fd58ab4a10bc162fa11442cd49581f6945279f4e690b40422417317400853d0be660a4f2fce2c59cfd63288e0c6bb31f3a66c0d24e10c75425b790eae9442dfc693783a038c6e8c5fbf6020f1fcc98800ee83ea7c6de11064a3b3262260bc6b5fa1d25f47121d9bedf2a97bab5f9b405297", 0x75) sendmmsg(r0, &(0x7f0000000100), 0x5bd, 0x24000004) 08:06:28 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) [ 502.442245][T12833] mxuport 3-1:0.177: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 502.472460][T12833] mxuport 3-1:0.177: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 502.481894][T12833] mxuport: probe of 3-1:0.177 failed with error -71 [ 502.496538][ T12] usb 6-1: USB disconnect, device number 23 [ 502.525553][T15459] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 502.525553][T15459] program syz-executor.1 not setting count and/or reply_len properly 08:06:28 executing program 3: io_uring_setup(0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20}, 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0x0) [ 502.577495][T12833] usb 3-1: USB disconnect, device number 41 [ 503.002400][T12833] usb 3-1: new high-speed USB device number 42 using dummy_hcd 08:06:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feff087b0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000003000000000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399df09a63796c113a80c19aab9d607000000b6cd483be3f022756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f174ce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc864061354354f251a7a271cfe8aa1dbaee1069474074b00e31f4d833d97b11f13e1b9354bca92964474e51c7bbf958e941358f24b33e3b30296ce0eb85f4bd760c9b6a67d018a298afca7995e44a9d"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xbc, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1c}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) sendto$inet(r0, 0x0, 0x8c, 0x24040040, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0xbb80, @dev={0xfe, 0x80, [], 0x19}, 0x5}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x8000, @mcast2, 0x400}, @in6={0xa, 0x4e23, 0x400, @mcast1, 0x7e9}, @in6={0xa, 0x4e22, 0x8da, @ipv4={[], [], @empty}, 0x8a}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}], 0x90) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:06:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0xc0000, r4}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000, r6}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x20, {[@main=@item_012={0x2, 0x0, 0xc, "e2a9"}, @main=@item_012={0x2, 0x0, 0x0, "7c04"}, @global=@item_4={0x3, 0x1, 0x0, "20001700"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "d777ed4b"}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @global=@item_4, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) 08:06:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000040)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 503.255121][T12833] usb 3-1: Using ep0 maxpacket: 8 08:06:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:29 executing program 0 (fault-call:4 fault-nth:0): r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 503.376873][T15488] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 503.376873][T15488] program syz-executor.1 not setting count and/or reply_len properly [ 503.405054][T12833] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=d1.88 [ 503.414341][T12833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.441606][T12833] usb 3-1: config 0 descriptor?? [ 503.447966][ T50] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 503.460686][T15493] FAULT_INJECTION: forcing a failure. [ 503.460686][T15493] name failslab, interval 1, probability 0, space 0, times 0 [ 503.475014][T15493] CPU: 1 PID: 15493 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 503.483129][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.493480][T15493] Call Trace: [ 503.496839][T15493] dump_stack+0x191/0x1f0 [ 503.501431][T15493] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 503.507587][T15493] should_fail+0xa3f/0xa50 [ 503.512095][T15493] __should_failslab+0x264/0x280 [ 503.517216][T15493] should_failslab+0x29/0x70 [ 503.522569][T15493] kmem_cache_alloc_trace+0xf7/0xd20 [ 503.528166][T15493] ? alloc_pipe_info+0xdc/0x8a0 [ 503.533260][T15493] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 503.539257][T15493] alloc_pipe_info+0xdc/0x8a0 [ 503.544074][T15493] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 503.550209][T15493] splice_direct_to_actor+0xdbd/0x1130 [ 503.555761][T15493] ? do_splice_direct+0x580/0x580 [ 503.560873][T15493] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 503.567140][T15493] ? security_file_permission+0x268/0x6e0 [ 503.573006][T15493] ? rw_verify_area+0x3a5/0x5e0 [ 503.577970][T15493] do_splice_direct+0x342/0x580 [ 503.582956][T15493] do_sendfile+0x1010/0x1d20 [ 503.587678][T15493] __se_sys_sendfile64+0x2bb/0x360 [ 503.592880][T15493] ? syscall_return_slowpath+0x90/0x610 [ 503.598530][T15493] __x64_sys_sendfile64+0x56/0x70 [ 503.603646][T15493] do_syscall_64+0xb6/0x160 [ 503.608277][T15493] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 503.614232][T15493] RIP: 0033:0x459f39 [ 503.618191][T15493] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:06:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r4 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001d80)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) [ 503.637870][T15493] RSP: 002b:00007fe726b83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 503.646332][T15493] RAX: ffffffffffffffda RBX: 00007fe726b83c90 RCX: 0000000000459f39 [ 503.654346][T15493] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 503.662344][T15493] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 503.670340][T15493] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007fe726b846d4 [ 503.678341][T15493] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 503.903494][T12833] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 503.911951][T12833] peak_usb 3-1:0.0: unable to read PCAN-USB X6 firmware info (err -71) [ 503.993326][T12833] peak_usb: probe of 3-1:0.0 failed with error -71 [ 504.009954][T12833] usb 3-1: USB disconnect, device number 42 [ 504.024644][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.035780][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.048865][ T50] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 504.058373][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.118272][ T50] usb 6-1: config 0 descriptor?? [ 504.702392][T12833] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 504.842836][ T50] usbhid 6-1:0.0: can't add hid device: -71 [ 504.849014][ T50] usbhid: probe of 6-1:0.0 failed with error -71 [ 504.858204][ T50] usb 6-1: USB disconnect, device number 24 [ 504.952282][T12833] usb 3-1: Using ep0 maxpacket: 8 [ 505.073197][T12833] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=d1.88 [ 505.082535][T12833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.092211][T12833] usb 3-1: config 0 descriptor?? [ 505.362897][T12833] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 505.371440][T12833] peak_usb 3-1:0.0: unable to read PCAN-USB X6 firmware info (err -71) [ 505.413501][T12833] peak_usb: probe of 3-1:0.0 failed with error -71 [ 505.443205][T12833] usb 3-1: USB disconnect, device number 43 [ 505.562358][ T50] usb 6-1: new high-speed USB device number 25 using dummy_hcd 08:06:31 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x701080) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:31 executing program 0 (fault-call:4 fault-nth:1): r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:06:31 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES64], @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x180, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x7fff, 0x6e02e3e4d6973892, 0x8, 0x8, 0x1000, 0x8cd9, 0x4}) 08:06:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 505.718114][T15540] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 505.718114][T15540] program syz-executor.1 not setting count and/or reply_len properly [ 505.745149][T15541] FAULT_INJECTION: forcing a failure. [ 505.745149][T15541] name failslab, interval 1, probability 0, space 0, times 0 [ 505.758154][T15541] CPU: 1 PID: 15541 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 505.766330][T15541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.776454][T15541] Call Trace: [ 505.779847][T15541] dump_stack+0x191/0x1f0 [ 505.784612][T15541] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 505.790645][T15541] should_fail+0xa3f/0xa50 [ 505.795181][T15541] __should_failslab+0x264/0x280 [ 505.800230][T15541] should_failslab+0x29/0x70 [ 505.804920][T15541] __kmalloc+0xae/0x430 [ 505.809214][T15541] ? kmsan_internal_set_origin+0x6a/0xb0 [ 505.814932][T15541] ? kcalloc+0x93/0x110 [ 505.819240][T15541] kcalloc+0x93/0x110 [ 505.823324][T15541] alloc_pipe_info+0x56c/0x8a0 [ 505.828214][T15541] splice_direct_to_actor+0xdbd/0x1130 [ 505.833863][T15541] ? do_splice_direct+0x580/0x580 [ 505.838981][T15541] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 505.845224][T15541] ? security_file_permission+0x268/0x6e0 [ 505.851050][T15541] ? rw_verify_area+0x3a5/0x5e0 [ 505.856013][T15541] do_splice_direct+0x342/0x580 [ 505.860986][T15541] do_sendfile+0x1010/0x1d20 [ 505.865716][T15541] __se_sys_sendfile64+0x2bb/0x360 [ 505.870925][T15541] ? syscall_return_slowpath+0x90/0x610 [ 505.876570][T15541] __x64_sys_sendfile64+0x56/0x70 [ 505.881703][T15541] do_syscall_64+0xb6/0x160 [ 505.886295][T15541] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 505.892433][T15541] RIP: 0033:0x459f39 [ 505.896400][T15541] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:06:31 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22}}, 0x24) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_open_dev$mice(&(0x7f0000001b80)='/dev/input/mice\x00', 0x0, 0x200) sendto$inet(r2, &(0x7f0000001bc0)="bb6d76c441bd62b140039a7324eb778ca2a6374297a2fe294c9215122614433da4297c3cfb98e3d557828a3c1f79550d4b3918b2fab28506c3a57e802b89141b14cbd16d29551b09fb51ab973860daeed94b71c0ebb53523e68ced11b4cf7f6aadc223c257dd5dbe776025513c627592daea1f", 0x73, 0x20040000, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000001b40)={0x5}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20410c0b}, 0xc, &(0x7f0000001a80)={&(0x7f0000001f40)={0x158, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x25}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x4e24, 0x100, @empty, 0x1}}, {0x0, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vlanu/'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x53, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xbc23}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9b, @rand_addr="64a5a813e170b2afc429f29b54c6e22e", 0x1080c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa598, @local, 0xb41f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x0, 0x3, 0xe15}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NODE={0x4}]}, 0xde}, 0x1, 0x0, 0x0, 0x10140}, 0x20008094) sendmmsg(r0, &(0x7f0000001840)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @empty}, 0x2, 0x3, 0x1, 0x3}}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="c6450e3218723cc927270613887e217d018dfc0678d5f147d96ed43faf036c3fb2e7031dd8b27adcb4d92eb454a95d526fd756eb6827e92e0c3c7fbd08"}, {&(0x7f0000000200)="0e97fbf31c0640ba2c0498d5890a003f8054795938dc09bdb74c4b0d848efb7e14b6d4df461276d63bf6936cdb061685a00b9e94bb7dab074668d56b192a17ec77afa87c2444865756dad444a907e9ccb998dbe7ce573e9ef32819a131853f45de53890ba38c9867b201ed5d676b4074290d226f7d87198494c293afc67f0605068e78ddd2106e6760fc649f57433e017596ee8e903e4c4553f2df700281e7dc1f2b353e74ade76f564361ebc2c17e0875160772315fb2dd0741d50675e86b2e6c3ebc638bfedeb6feff34382dc34b8f"}, {&(0x7f0000000300)="ecd27491ad97b1d78a0118924595c54f8527ea457ba0025faa55553470fb0cbcc4a52f6d2f20e69a0ea40993846b4521bf368d0c841ceb6bb815e85c79e2d4d164a41fdb6b79caff8926bd89ac8dcc9dab6745391416db5bf9da6ab9e58ccd3c14b7bd9eddca9e31f724569024542a66bdecb1dcc361d0b5d14f9259cf6807ea04f1459a29a6b1aef6f6499b1931021b25fb25d24f649f6e036f166ac8621d6b1cb7a71f9e872d94d14235985c70cbaccb6a4b9e21591065970c00ec37e3599007dbb2a6e5041a19edf1bbbd00f1d8ee581640c07af3cdc007891831bd799877b00b875a3b0a91908b"}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}}], 0x400000000000166, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22}}, 0x24) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/nullb0\x00', 0xb4c2d4061525452, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r9, 0xab07, 0x7f) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) dup2(r10, r8) [ 505.916095][T15541] RSP: 002b:00007fe726b83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 505.924602][T15541] RAX: ffffffffffffffda RBX: 00007fe726b83c90 RCX: 0000000000459f39 [ 505.932672][T15541] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 505.940713][T15541] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 505.948755][T15541] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007fe726b846d4 [ 505.956802][T15541] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 08:06:32 executing program 3: syz_usb_connect(0x0, 0x3b3, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006c03e008c62483d1364f000000010902240001000000000904a90002ff5d81000905850b0800000000090501960800000000a1ea9b12a89726275865ee55f0f9b16dba15dd02b5f58143a30cb82e0cee911a9868b6296e0fd1dd93f24f764f6a7bda285dfcd9a246927aa9f9e71a378412b42a417f83e612b5fc2166868a92dd6ba187b713cac80f0ad7ba7d23e9f6de14bc33f1421f305d739e33f994193a1a662a"], 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r1 = dup(r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)) 08:06:32 executing program 0 (fault-call:4 fault-nth:2): r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 506.152825][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.163948][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 506.177014][ T50] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 506.186279][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.295208][T15558] FAULT_INJECTION: forcing a failure. [ 506.295208][T15558] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 506.308623][ T50] usb 6-1: config 0 descriptor?? [ 506.314098][T15558] CPU: 0 PID: 15558 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 506.322055][T15558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.332274][T15558] Call Trace: [ 506.335928][T15558] dump_stack+0x191/0x1f0 [ 506.340340][T15558] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 506.340415][T15558] should_fail+0xa3f/0xa50 [ 506.350889][T15558] should_fail_alloc_page+0x1fb/0x270 [ 506.356375][T15558] __alloc_pages_nodemask+0x3c1/0x60c0 [ 506.361961][T15558] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 506.368249][T15558] ? __module_address+0x68/0x5e0 [ 506.373353][T15558] ? is_bpf_text_address+0x3c5/0x4b0 [ 506.378749][T15558] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 506.385018][T15558] ? __kernel_text_address+0x24f/0x350 [ 506.390806][T15558] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 506.396760][T15558] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 506.402705][T15558] alloc_pages_vma+0xc9d/0x18c0 [ 506.407673][T15558] shmem_alloc_and_acct_page+0x771/0x1170 [ 506.413470][T15558] shmem_getpage_gfp+0x1ae2/0x3f80 [ 506.418654][T15558] ? is_bpf_text_address+0x47d/0x4b0 [ 506.424005][T15558] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 506.429945][T15558] shmem_file_read_iter+0x4f3/0x1140 [ 506.435771][T15558] ? kmsan_report+0x1d0/0x220 [ 506.440538][T15558] ? kmsan_get_metadata+0x39/0x350 [ 506.445743][T15558] ? kmsan_report+0x1d0/0x220 [ 506.450513][T15558] ? shmem_file_llseek+0xdc0/0xdc0 [ 506.455685][T15558] generic_file_splice_read+0x730/0xac0 [ 506.461334][T15558] ? splice_shrink_spd+0x100/0x100 [ 506.466512][T15558] splice_direct_to_actor+0x587/0x1130 [ 506.472013][T15558] ? do_splice_direct+0x580/0x580 [ 506.477106][T15558] do_splice_direct+0x342/0x580 [ 506.482114][T15558] do_sendfile+0x1010/0x1d20 [ 506.486766][T15558] __se_sys_sendfile64+0x2bb/0x360 [ 506.491940][T15558] ? syscall_return_slowpath+0x90/0x610 [ 506.497543][T15558] __x64_sys_sendfile64+0x56/0x70 [ 506.502611][T15558] do_syscall_64+0xb6/0x160 [ 506.507159][T15558] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 506.513100][T15558] RIP: 0033:0x459f39 [ 506.517048][T15558] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 506.537044][T15558] RSP: 002b:00007fe726b83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 506.545621][T15558] RAX: ffffffffffffffda RBX: 00007fe726b83c90 RCX: 0000000000459f39 [ 506.553628][T15558] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 506.561627][T15558] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 506.569621][T15558] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007fe726b846d4 [ 506.578326][T15558] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 08:06:32 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x12, "8efc7f9f65f7ed60a087f2328add94418577"}, &(0x7f0000000080)=0x36) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x84000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{}, {0x3, 0x8b}, 0x6, 0x2, 0x4}) ioctl$TIOCSCTTY(r1, 0x540e, 0x5) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x80001, 0x0) linkat(r2, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x400) r4 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000002c0)={0x20000001}) r5 = pkey_alloc(0x0, 0x7) pkey_free(r5) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x40000, 0x0) read$rfkill(r6, &(0x7f0000000340), 0x8) r7 = syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x2, 0x420541) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r8, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x0, 0x8, 0x0, [], [{0x8, 0x1, 0x741, 0x4, 0x7fff, 0x5}, {0xfffff800, 0x51, 0x7fff, 0x1, 0x20, 0x6}], [[], [], [], [], [], [], [], []]}) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f00000007c0)={0x1, 0x0, [0x3, 0xe, 0xfffffffb, 0xe83, 0x9, 0x16a25983, 0x4, 0x2]}) syz_open_dev$midi(&(0x7f0000000800)='/dev/midi#\x00', 0x5a0, 0x880) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000840)='/dev/null\x00', 0x1, 0x0) ioctl$TIOCSRS485(r9, 0x542f, &(0x7f0000000880)={0x40, 0x5cbf2f5d, 0x1}) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f00000008c0)=0x5, 0x2) r10 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000900)='/proc/capi/capi20ncci\x00', 0x424002, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x800, 0x0) fanotify_mark(r10, 0xd0, 0x1012, r11, &(0x7f0000000980)='./file0\x00') r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/dlm-monitor\x00', 0x1000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x2400, 0x3) r13 = syz_open_dev$radio(&(0x7f0000000a00)='/dev/radio#\x00', 0x1, 0x2) ioctl$UI_SET_PHYS(r13, 0x4008556c, &(0x7f0000000a40)='syz1\x00') [ 506.593795][ T50] usb 6-1: can't set config #0, error -71 [ 506.616458][ T50] usb 6-1: USB disconnect, device number 25 08:06:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 506.672504][ T12] usb 4-1: new high-speed USB device number 36 using dummy_hcd 08:06:32 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x5, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000002c0)={0x0, 0xad, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r4, 0x19, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) socket$pptp(0x18, 0x1, 0x2) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) r5 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000000500)='em0cpus1\x95\xeb\xe6\xa2\xa5\x12\xb7V\xda\x8eo\x9ce\x0e\x8a\x9e\xc6!\xae\xe8\xf9I\xe4e\xb2q\xb9\xd9c\xc1n\xddg\xf17\xbf\xac\x19\xf8\xb0\x84\xad4\xc4\xa27\xe0\xdf\xfd\xf1\x98\xdb\x19\x97\x89\x9f\xf6Rr\xde7\xcb\xed&0\xa4\xb4):\x15\x8a\x91@<\x00\xbb\xbfm\xc8H\x95\xbb\xdea\x96Q\xef\x8a\x01\xf0<_\xfb\xb0\x98\xbc\x81#.\xc9\x93\xf1m\x91\xc5P\xe834\xcd\x14\x01\xe9K\x16\xde\x87I\xbf\x0f\xeb\xbe\xb4\x914\xa7>\xac\x16\x01\x9a\xe98]\xb1\xd4 \xcb\\\x1e1\xc3\xc91[,2w\xa2\xfa\x04<\xd0\xea\xe4\xb4', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r5, 0x0, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) write$FUSE_GETXATTR(r3, &(0x7f0000000400)={0x18, 0x0, 0x8, {0x1}}, 0x18) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r9, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r11, 0xb704, &(0x7f0000000240)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x20, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@euid_lt={'euid<', r7}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/fuse\x00'}}, {@measure='measure'}, {@smackfsdef={'smackfsdef', 0x3d, 'fd'}}, {@uid_eq={'uid', 0x3d, r8}}, {@fowner_eq={'fowner', 0x3d, r12}}, {@permit_directio='permit_directio'}]}}) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f0000000840)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) dup3(r0, r13, 0x0) chdir(&(0x7f0000000180)='./file0\x00') 08:06:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5a}, [@ldst={0x0, 0x0, 0x8809}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='G\x00', 0x0, r1) [ 506.817409][T15567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.828045][T15568] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 506.828045][T15568] program syz-executor.1 not setting count and/or reply_len properly [ 506.895742][T15572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.912339][ T12] usb 4-1: Using ep0 maxpacket: 8 08:06:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x14a86, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x34, 0x2, [@IFLA_BOND_PRIMARY_RESELECT={0x8, 0xc, 0x2}, @IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x8, 0x18, 0x8}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x101}, @IFLA_BOND_PRIMARY_RESELECT={0x8, 0xc, 0x1}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040008}, 0x28800) 08:06:33 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 507.036990][ T12] usb 4-1: config 0 has an invalid interface number: 169 but max is 0 [ 507.039423][T15579] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 507.045826][ T12] usb 4-1: config 0 has no interface number 0 [ 507.054072][T15579] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 507.054116][T15579] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 507.060285][ T12] usb 4-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 507.068652][T15579] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 507.076937][ T12] usb 4-1: config 0 interface 169 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 507.099168][T15580] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 507.100458][ T12] usb 4-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 507.110526][T15580] netlink: 'syz-executor.2': attribute type 24 has an invalid length. 08:06:33 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x400, {0x0, 0x0, 0x0, 0x0, 0xa6381, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xffffff4e, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) [ 507.118686][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.144479][T15580] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 507.152982][T15580] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 507.173803][ T12] usb 4-1: config 0 descriptor?? 08:06:33 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x81, 0x6d1a38a0fde7f9fb) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r3}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000180)=0x84) r4 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @local}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 08:06:33 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1f, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af4fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c484686d23f6ad66a6887e19d5ae79c9ed766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc257"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x2f, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 507.426814][ T50] usb 4-1: USB disconnect, device number 36 [ 508.232298][ T50] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 508.482301][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 508.612495][ T50] usb 4-1: config 0 has an invalid interface number: 169 but max is 0 [ 508.620807][ T50] usb 4-1: config 0 has no interface number 0 [ 508.627379][ T50] usb 4-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 508.638574][ T50] usb 4-1: config 0 interface 169 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 508.648625][ T50] usb 4-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 508.658147][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.670521][ T50] usb 4-1: config 0 descriptor?? [ 508.916207][ T12] usb 4-1: USB disconnect, device number 37 08:06:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e22, 0x1ff, @loopback, 0xfffffa95}, {0xa, 0x4e22, 0x90b, @dev={0xfe, 0x80, [], 0xb}}, 0xff, [0x400, 0x10000, 0x5, 0x9, 0x1, 0x1, 0x9, 0x2]}, 0x5c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x80901, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180)=0x639c, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x24) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={r3, 0xe0a, 0x1293a49179ed4b55, 0x4, 0xff}, &(0x7f0000000280)=0x18) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{0x7f, 0x9, 0x2, 0x7}, {0xa52, 0x7, 0x5a, 0x6}, {0x8, 0x0, 0x4, 0x6}, {0x99e, 0x7f, 0x6, 0x1000}, {0x1, 0xb, 0x4, 0x3}, {0xe2, 0x5, 0x1f, 0x1}]}) socket$inet6_sctp(0xa, 0x1, 0x84) setrlimit(0x6, &(0x7f0000000340)={0x800000000}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000500)={{{@in=@broadcast, @in6=@local, 0x4e22, 0x7ff, 0x4e21, 0x7ff, 0x8, 0xe0, 0x151109a105a62271, 0x7f, r6, r7}, {0x1, 0x6, 0x3, 0x1e, 0x2, 0x1ff, 0x60ae, 0x10001}, {0x9, 0x0, 0x2, 0x8}, 0xf3f9bec5, 0x0, 0x0, 0x2, 0x1, 0x2}, {{@in=@local, 0x4d2, 0x32}, 0xa, @in6=@remote, 0x3502, 0x4, 0x2, 0x40, 0x7, 0x7, 0x3}}, 0xe8) r8 = fcntl$dupfd(0xffffffffffffffff, 0x80c, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000680)={0x0, 0x1, 0xff, {0x2, 0x6}, {0x5a, 0x1000}, @rumble={0x1, 0x7}}) r9 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f00000007c0)={0x8, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]}) socket$xdp(0x2c, 0x3, 0x0) r10 = fsopen(&(0x7f0000000800)='v7\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000840)=0x8000) r11 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r11, 0x0) r12 = dup2(0xffffffffffffffff, r9) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000000880)={r4, 0x6}, &(0x7f00000008c0)=0x8) r13 = openat(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x2, 0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000940)={0x0, 0x7, 0xffc1, 0x0, 0x40, 0x3}, &(0x7f0000000980)=0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r13, 0x84, 0x18, &(0x7f00000009c0)={r14, 0x1}, 0x8) close(r10) 08:06:35 executing program 0 (fault-call:4 fault-nth:3): r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:06:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800000) fsmount(r6, 0x0, 0x80) dup3(r5, r0, 0x0) 08:06:35 executing program 5: syz_usb_connect(0x0, 0x33da, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x48, 0xe1, 0x2d, 0x8, 0xc0ad, 0x18ec, 0x370d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x33c8, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x55, 0x4, 0x10, 0x3, 0x99, 0x9b, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x2f5, 0x3, 0xae, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x63, 0x1}, @generic={0x68, 0x23, "a5619e8c28b3b5c7990c3fdcf16c67fc91171d8c540d296bb34c91a5568aa18cb997d8583bf59468706868c718a87cfe7d1de017eb5c0bdd72ebc8892371b46683ffa5d31c170f95b7c5a30dfb970d568fe0b06abee70cd50a0f80aa9d9d0eb49f7bab7b399b"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x1fa, 0xce, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x229, 0x5b, 0x9, 0x5, [@generic={0x9f, 0x30, "e266b1e6ad59ab08393ed27c0c593bc8e1f200a4d253cd04ba962f10e5eb41c7e023395f2599d63e4b0ca56e45dac746c9c5653106a816d5685a39bfca9edc82fefcfee66e373311b9bc12ce4111c1058405601cbb70579485037fdd9aedcd7fada86f40995ec0151346d87521edf0c0302faba8db209860c3238e5528d8a8eb123c57ab0780401490f58eae42c764f055f2c03d63653b1d85bd3f99d7"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x177, 0x3, 0x1, 0x9, [@generic={0xd1, 0x7, "f13deb7d30bd804e0ed5a3101c728ca27c3c0280f74a7fcb1fcbbf557e813d45c67abe8a8c6fbdc8f120e64dd9376dc4214afdf3058aa8092e460b1ec311d02d0fb427a9a9b1e758b4ae39df3f906656f2df3dc842dc51e38f38d7975db918639a3c1c68e1efb6018f0799e20217e13ba49564bc1aa764fa5fc04ee6520a083f025024cf55edb6a84d45624972116a16edb6cf4a067960b32f8245e85d09b5801dd128f44cd4e46cb7b73cf2cdbe53a97486edc5b8a8ebc054f1845dad7aebe4aed6a3086827436867f31bc1a3e646"}, @generic={0x1002, 0xb, "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"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x225, 0xb9, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xbf, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x4, 0x6, 0xf7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x7}]}}, {{0x9, 0x5, 0x3, 0x3, 0x2a5, 0x9, 0x0, 0x7f}}, {{0x9, 0x5, 0x87, 0x1, 0x144, 0x7, 0x52, 0x0, [@generic={0x81, 0x0, "5ab0f27a08d967d591030b38fcf2169e17d2b8b0feaf04578019cddaccb5f408a1066d855c956aae000fcd75170bc2d73e826ce2f2bbe3680fa6a3e44d27ea3be0b8e8cc19e0b143fc1d9d4b639cb350bf9f7c2b0193da6e94c6d85f17e11e4f17ed8d68838fec37ac63a8e6201eacbec4830b5776fcb3bf536ba24722c2bb"}]}}, {{0x9, 0x5, 0xe, 0x2, 0xa9, 0x0, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}]}}, {{0x9, 0x5, 0xeff1c0f7886a43c2, 0x16, 0x389, 0x4, 0x81, 0x8, [@generic={0x1002, 0x0, "94f716577d664e49f2c2d9e702ff406b788e0882040f46c686a977e910e61fb15a3e2d473aae75c00c4744ff1ce3dcb36ad255b81ea44421a1239f95fa71be951350ebaa9de81d1efc3d338a1c091cafc955f49d6251dc9f88b294a9a11399d2172503f17eb0809e9cffa700df1381fa3daf74c3ed65a9f5247f0e52a5967d40f61368b1bb99bf5df9add1a33dbd35a6a1f197b82e1e69261d616ea0717059eeb41219ddd352a5fa3be83f8c17b8c11abec5db55a925eb62a9d4eaf934dae6c38793559c883523e0e57070878d64a9714b7852ee852cba19e5ea72f4316c0a6e06f292507f28c0675eec1632aa9604460b7d878d9314f9b83665a272678b44f2d0c139863e841f4aaae31ffa62efc58e04f8a0fd779c130d0d75ce305dfeb300bee3304fa5c6cadaa8b4f53dbf4a32076d8a9dc5ad2338eeadc69600dd53a0b938272371d91f9ca797a128149533b2f78ecfdd389a0a448a3142d6c6e02db7e73ce0edfafae0ba81af808b35e4b99c33224e5164c7f35521d3238c778f6df6c9d472f9fd7fbd33979cc1c1c970c0976554793ad2bfddaaa49379fdd27be4696a9efed6c33f0b758b36a145d23bec0e581275202e1758ce6ca8cfe99f6f08e7fa124e10b4fbba00a8ad007f7f872a766add5f6e3cc3b54696c9d9d53f2a1b9dffc4a3e0e8baf6f71e1db22f5ba19e5ccea2b63638f9fb09f7b470fbf58cefc3c716272bb96257a6fbea7f9bcd54d492be79937db9b516c9894dac15ee38263a2d137c67c0f5b9427b1320b47f5762f6ffef2a163025d045fe080e45ab91c35992f1b0b9160b1499ff14f52c8e6961909c1a5f4ec673d5b39239288087edec8b47efa4275a9ee854364c0a2ad9c520982f754463f20a40a6412b276a9c1c046af7724f958c133db462681723a95a6b21619c292b18a1c4dfd5ba3b57bc3a2f56abb53f24d8bbddfba6e1c7031adc989333c0929c39141baafe3dca4ae6e6d4bf257d15669edf97f76b6b50cfc8b3f10325a98611fd1aa5b02427bc522415056b6d7d461129d582133f439b7c12fc5fc13ff15b5c0e06231d157f8c52a0ccfb8d11e0bc930a8a9ff545e0f4fd12ae4e09828df17dd4df4db94fd0d479cfa83b981952ce3006efd8f6aff9bd34a253e19885a6666bedecafd327668615e6ec62d0fdf2817a9559e537a4eb1f41ef4296096410793e4d2a04cccf64b668931aad53615e53e68c4b93205e765923e377b37b903f8fa29ff6b1f562ac1a3b87d879215713a69408b8d41b4ff5216529e74e0bd8810f1542af4b2b6228ff1700fcfb255a88bf9b04383d6b7676e250edefed26e47b9378bee2ff672de9b88ee448937fd014ad8d961ace9d5a7ec8002f9f8208e273cf7a2e9234b8ca8ff7c75f36aabad797a38391bb4d3c4ce6e985c2e5ad6bbfe7b819d1068027a7b9416ef7f666c9603ec81e9b1a7bae53b6c45f8e8dda539f8600ebaa63590b9e15c9946c1a96481bd09da6788fdff667504f5301fa1fa57579c00bf4bc356ec088cefd5ebef0e15d29864e25e3e4cdf0da95e2b784483173b329b9739063ddec15e614cddf065e208c3b33a0a4d100b64fff84bc67ac6ccdf4db0d9ba2141c6d0b8b485b09b1e18f0da7509759382d0982609a92eacf79108129d7b9d9fed3245e3acdf7ec40e1fd883b262157494a3f57548e81628c973fb9d7860fd9ebcfa49ff7693eda7b341589a3ed16a73636b43813925404e1c3f514789f97d7c00fc981e9651c330a7a7a31085b8d6b479721e2b2a021cb570b5701c3bc25559a23f6883da5bff13b5921ff0c90d4ae0226086fbd5c4a8f8a9a8af3da0133b7c579ec1d01ab45634cffd1b5ec9fcb425ac577eee591475d1ebbf2a2e19bc01d40041d23a2736906658d23bc8beae177cf75b25b04e0fabd8030d2b88595554800f94d7d2c36aeb2115a112f4634441286a9bde012f9c31be889eb11091012ee5d21d08bc8cf2df800c6be9c25e2fc7498c3152b3f2e9b3da13787f578943d462c60948f984687f5bacc6b91fbbf309f10a2be439f2a108df6a5f277c68950252318aff6bfe8a82fb6eef5939f63d1a2fa4945fec3dae1f1550b74a52b42e4c89d98e2cf739b6bcd2638d69ca980586cf21004ebe6124d6b3fe3fb8a474b0bd997a9bf20fab39d1cf0b294169dc7f462c01199d8d92b95ad181fd4b477ca73d4163010c1fda1a4de0f5aae3781701b01551ff8b51e304bc76c2e73a02f1b31fffa25546fb644c8f218f653962672560e5a8cea07a9655817722475dbd55cf1619e762ff4cafcd76087e06e9ad721afd1f753af12dcbbc38906b1e0121bf1979e1e25be87757f145964045989b882a0f2e5c5711fdfc9c94d9d76407fa8199e32e2584be3299dec8c1efe610d449d7821141d3a2a7150cbd0262d7f944b6f50937dfcb7a5586d0917eb16322eab672d2226da68af7b7c50549c84e2d1a03b05e5be6754d1471fe393d3e4181bf5c29b1df6a61b436a06853a4636ba00736359563f166e3fb8deff8e4c3c6b37b068a25424d60114ae7c152ab42f6b6b9caca1e03265b19142170511e12da877a28e71aa0bcb69245351a586a1056f26d71847dc101ea1e11a3a645642e7607bfcbd8678971c070610d7101ffd6ff816524bc8f131501528ad695794709324816caa0bf488a6e5ec50158c61fb12d4489c0ad8744be371b1be211f1089d766cdb2e633f2639614a319bcdc321556a63b24789fe0f603e9139348d02fdbc032cb6989906da794b450c4235b6cbcf1b7e7a29ae6791a619a67602002dd2a385dc6c88f82d63d3addca9f1b88f2a0d7283b3ebd568b43f666307fa974501b5a2008b39daf9ea8d49394ffe25c85ca5ada91af3309c87d8a35b48af1fc4006b2c8b6c0a3026af9fe590e69c96bf5333fb432c0018ec66dd4cdc1fd56abcc18a9c30bce6d4f9b297864746b24095a1d55d3d4ba86560e42ed9adcbfbe1eccbe78a119a730853aed150988f467a6a3393d71a7c607971d22573c02baadf400d1918695de46ae8903cb29ee5342166fb445489b4cdf7f22249868e28df5f39cbca94955b9b80c2e94439890e209e98b3ffc7795e8e4e62e18b805cae8e1aef52868ecccae7b87f96de00a9279ec604254509c07285bea2ee4d7887f4c9b84e34d2a8b8f08516bddcdca74772324a9098e0a4b79b8602da1fbfbc25249b375edf7fa60e0bddeaf3b50b41645fa49f612c65bd9c82152cf91f7f4b8bc31ec6e7b832c671f2e27541de5b8b4a70455c1226d8647132610378067b1a4b27b73e0570c656d5f99ee24b4a1d583493e4eab4750fb7b6346d4530d037e49ab934eb7dd3f3671c99656a34db55e3004e345f965027978157c0187c4505c55c266f3f5f3dfa4752210695bbbf4236beb7ed0d8a8303dfc23428026e0eeb55c6b065954f79d5dbcea29bd8a8aed8dbcbc34337b94a22cd0216e01941d4c3525b3ca46602b729f7874536f5d7d4a1fbf15a1f800ac64207f3f18766db84a8209b7fcd080d0d678d108b1334f72d5c9c3d994d9fd7ff52273279ae1c6b6c13e7c3298423532e0f4d7fd5fec539137109edb0f26e58a439e3584595dbfa63e3ac8aa8eca78d2d3f8274352b2c07726ac447cdf8d582b6c3b130ab914a06f7f801f15c70732eb5bcb4c10a3a8e774ba447c43cd0466812e35a1ab1cef7967ab070602f3b39ec6a270032f01f573fbe29713488ef0d4823719c720fca01e21d7eb13baf5df850017ca3039b97f6b80c3aa6abe8bd1e9293293d736249e2fc98fc2e469422a9cf052f448cb90911c5059532ac79010b3714d7131777180cccc77876a7c7b52ff3a0d44457852f33b823356bd1a1b71e99969e4473f7bea8c7fd4872279c395f9d23debb65e85c6ff718473715cfa124034151f131de83055740b3dac50ce8775b9293f772ce0a60f5bfa5acf5e3c82cd742f588ac0e2451a6b493cda87bcbe1b0ef3306be300e0572c8648cd4196ee0dcc226f004f9e3ce0a44eaf2b91186471a655f8ca1c5c24f26e3af3f7423a7110c1f6a6440570d04ae2707c97c5f643f15d7b8e155f8acc2aca1bc24c004beac565227c392581d0876bef9a544534fd6b58ae9f38f54851bd04d98c921710b702f3865edd5649f0ffd232685de5326c29f68f9ff370244853d09e130c23b7ed72ececcd588fa0e49f20cfa2febd1647edf2a7be3ac8cd15cd822ba78c4ec174b801b38659c279d9b88cde8819240e1164c93edf0757a8d7a681a34073a0499b3e2a103a0ef9deaca7ee26e0df78b54e0add91d20a3ddb72ba4302c8fae0834a1c17e5fa61e62d74c35c901f0d9aa59cad3f14a7ccdd2f3fc3658b08527b7fbd6a802f727083596e99a2af8fffc91217bee444f378b283eeafb66e1189c06a15e366c8c82064fe23dbb3acb62590846fa4f0b6cda4a4f1c46281f30f58a6ecdccd35fbb0136fbd49726804e46cdacbc4bc985e49bf8bd74147ae17341734d28d28d893c2a9f109e9c03c85f9a25a1f42a25ebed36e80ff3065ba17aeab2ae998ee572b314b0f609db0ffd7a416ffd656b4145deffc598513df81b7e2eb8daeeac9250c6edf3668eb36a56d3e62822e4774cfcbe4bf1241e55a7b374847a4f6f73b965d15152cf6d7a0364488a9b5cbe58c901e59069f8afafd004150a86f8969c0574ec3497bbea83f32cb6c44753383842a5b2b72b3d969f7f7b24e39280b8f3516245be648c8bcbf97edad811511798fa86be6d1f54a59df1d1620ecfadb524cd403581161e2d862bbf41b625748dfcf0ca640f5000b0e7ed50d7c15611252e4d348408e87ea0c30abbecd96146407ebc065679414501475f9b1d22603c8d990de085e995dc8b7e6955e43c5309843347ed05ede0516fc57fb307d3bddcb2f04980403d8df514913d637ae74a26ddaf669e64190d6dc8a68ccc124a562e99bbbd79097147e290c7ecf1c0c27208a1a4277c44464288725f00f32ff567239313afa2ea93a080341b78ce4942e79111feeca3551853a744aa73f4950ab61a33dd2795d76e8a683291acda3400ebeb7775c6715898b16908c2a6bda57bb06e9eb8438b0b5edeb8c91f5d57fcb73473a6f5973f62bb38e206e3e62d8604ecbb14fa39fe37adfafa2f14805fef699a248e530dea60d95edd49d1c6483eefbe5a264f7b50607262275cf6a0ef51a16bafec092f87b151ebec6ad71bbb4104916d1cf881a33d5eaee82eab62489b19b381b87bdd5d281101c4c776d54a7e7032f467baafd46f0c3dd28f2af04b1560dc04d7020ba66a9a8c9a4b3ca06e58f55607f3b0ff21af9b14d1f4ff36cb02efe7126a53419215022ecc071bb95033440faaeb2f2d63a6d366d1148627508d55a75b5db8ff9ce9d2a393969fbcf3b90bf1812ff771afc8161e6d825497fe45f4f81b757522f685ad06db963abd2b08fcdbca9809c68d5f5bff302c73198a93cd9e94d5ebb501c6fc72ed1e70d2c1ec670693f7505b7890b57aa66c0a482eb811619b13edfc2f8e91969aaa0f28a56a665220c093d7fa1f089539513cfe7d1c8632f68268e53e079bbff8b6cc61d5d2f43214a33d6b654615de67a85455f6936265a8f6177f40104cb35476107cc4576ab778a685bc12de3e2f3f5ae326270093f4b0f1588513d3bf0ceeba6c8bd80c7b82012314369fbf53092d5d45f88d37ba3b9686afc7559ae0e01629549a53fd632c74ab7833d78baaeeba3a60619d9c864d93ee230c23418734d6a694392f344b226a5b97493fda67c7c824c3f337db0332df308695d5c8c57"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x7}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3c, 0x0, 0x14, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x127, 0x4, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfff9}, @uac_iso={0x7, 0x25, 0x1, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x1eb, 0x23, 0x1, 0x1, [@generic={0x41, 0x23, "479013991c917588f1852f4b449d90ec19bad256da0e4d4e088c56be88d6fa6211fbad00dcf8aa54e9df77b3f7f69c3f196ef5e801050096c574db3da57021"}]}}, {{0x9, 0x5, 0x2, 0xc, 0xb3, 0x2, 0x56, 0x3}}, {{0x9, 0x5, 0x7, 0x4, 0x305, 0x4, 0xfa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x10}, @generic={0x40, 0x11, "981e2598220e9d36d14648c81f09e1115828e618761cabd63e7baecffc362f9eae600b5a3ab6f3955a30d83ab2563ef93cd39fd6d2b21789f5f944884a5e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x387, 0x7, 0x9, 0x93, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}, @generic={0x1002, 0xa, "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"}]}}]}}]}}]}}, 0x0) 08:06:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:35 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = gettid() tkill(r1, 0x1000000000013) r2 = syz_open_procfs(r1, &(0x7f0000000040)='fd\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:35 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$packet(0x11, 0x2, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) [ 509.341393][T15619] FAULT_INJECTION: forcing a failure. [ 509.341393][T15619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 509.355814][T15619] CPU: 1 PID: 15619 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 509.363706][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.374032][T15619] Call Trace: [ 509.377779][T15619] dump_stack+0x191/0x1f0 [ 509.382127][T15619] should_fail+0xa3f/0xa50 [ 509.386563][T15619] should_fail_alloc_page+0x1fb/0x270 [ 509.391967][T15619] __alloc_pages_nodemask+0x3c1/0x60c0 [ 509.397454][T15619] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 509.403463][T15619] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 509.409584][T15619] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 509.415775][T15619] ? prep_new_page+0x792/0x9b0 [ 509.421616][T15619] ? get_page_from_freelist+0x11d3/0x19f0 [ 509.427538][T15619] kmsan_alloc_page+0xc3/0x360 [ 509.432309][T15619] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 509.438727][T15619] __alloc_pages_nodemask+0x149d/0x60c0 [ 509.444976][T15619] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 509.451037][T15619] ? __module_address+0x68/0x5e0 [ 509.456458][T15619] ? is_bpf_text_address+0x3c5/0x4b0 [ 509.461789][T15619] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 509.467970][T15619] ? __kernel_text_address+0x24f/0x350 [ 509.473641][T15619] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 509.481572][T15619] alloc_pages_vma+0xc9d/0x18c0 [ 509.486999][T15619] shmem_alloc_and_acct_page+0x771/0x1170 [ 509.492778][T15619] shmem_getpage_gfp+0x1ae2/0x3f80 [ 509.497953][T15619] ? is_bpf_text_address+0x47d/0x4b0 [ 509.503265][T15619] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 509.509428][T15619] shmem_file_read_iter+0x4f3/0x1140 [ 509.514723][T15619] ? kmsan_report+0x1d0/0x220 [ 509.519509][T15619] ? kmsan_get_metadata+0x39/0x350 [ 509.525662][T15619] ? kmsan_report+0x1d0/0x220 [ 509.530347][T15619] ? shmem_file_llseek+0xdc0/0xdc0 [ 509.535457][T15619] generic_file_splice_read+0x730/0xac0 [ 509.541256][T15619] ? splice_shrink_spd+0x100/0x100 [ 509.546380][T15619] splice_direct_to_actor+0x587/0x1130 [ 509.551934][T15619] ? do_splice_direct+0x580/0x580 [ 509.557944][T15619] do_splice_direct+0x342/0x580 [ 509.562812][T15619] do_sendfile+0x1010/0x1d20 [ 509.567417][T15619] __se_sys_sendfile64+0x2bb/0x360 [ 509.572677][T15619] ? syscall_return_slowpath+0x90/0x610 [ 509.578274][T15619] __x64_sys_sendfile64+0x56/0x70 [ 509.583308][T15619] do_syscall_64+0xb6/0x160 [ 509.587811][T15619] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 509.593693][T15619] RIP: 0033:0x459f39 [ 509.597578][T15619] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 509.617615][T15619] RSP: 002b:00007fe726b83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 509.626032][T15619] RAX: ffffffffffffffda RBX: 00007fe726b83c90 RCX: 0000000000459f39 [ 509.636266][T15619] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 509.644316][T15619] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 509.652433][T15619] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007fe726b846d4 [ 509.661036][T15619] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 509.671705][T15625] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 509.671705][T15625] program syz-executor.1 not setting count and/or reply_len properly 08:06:35 executing program 0 (fault-call:4 fault-nth:4): r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 509.812491][ T12] usb 4-1: new high-speed USB device number 38 using dummy_hcd 08:06:35 executing program 2: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f0000000480)="2206297b6895b66147b3c7218a9169a85ea0bdc9e1587a57d422b5ae5c135342e33089754c8107c3cd3923dd4a71c2ff0f6e7b6b4816122d2550689eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000000000000000b4ec24c53d3d661ff5ff70e4880617bac218cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe273f4772539844a12876dc0217de9b895c949bc32336eb852064e0791b63d541f79", 0xc0, 0xfffffffffffffffe) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000000)="a5", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000440)={r1, r0, r1}, &(0x7f0000000240)=""/92, 0x5c, &(0x7f0000000140)={&(0x7f0000000100)={'crc32\x00'}, &(0x7f0000000200)="23c9e3", 0x3}) [ 509.894372][T15631] FAULT_INJECTION: forcing a failure. [ 509.894372][T15631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 509.907762][T15631] CPU: 0 PID: 15631 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 509.915852][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.926216][T15631] Call Trace: [ 509.929591][T15631] dump_stack+0x191/0x1f0 [ 509.933969][T15631] should_fail+0xa3f/0xa50 [ 509.938441][T15631] should_fail_alloc_page+0x1fb/0x270 [ 509.943941][T15631] __alloc_pages_nodemask+0x3c1/0x60c0 [ 509.949472][T15631] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 509.955512][T15631] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 509.961809][T15631] ? prep_new_page+0x792/0x9b0 [ 509.968031][T15631] ? get_page_from_freelist+0x11d3/0x19f0 [ 509.973999][T15631] kmsan_alloc_page+0x131/0x360 [ 509.979083][T15631] __alloc_pages_nodemask+0x149d/0x60c0 [ 509.984685][T15631] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 509.990963][T15631] ? __module_address+0x68/0x5e0 [ 509.995940][T15631] ? is_bpf_text_address+0x3c5/0x4b0 [ 510.001277][T15631] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 510.007404][T15631] ? __kernel_text_address+0x24f/0x350 [ 510.013711][T15631] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 510.019937][T15631] alloc_pages_vma+0xc9d/0x18c0 [ 510.025471][T15631] shmem_alloc_and_acct_page+0x771/0x1170 [ 510.031275][T15631] shmem_getpage_gfp+0x1ae2/0x3f80 [ 510.036463][T15631] ? is_bpf_text_address+0x47d/0x4b0 [ 510.041828][T15631] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 510.047779][T15631] shmem_file_read_iter+0x4f3/0x1140 [ 510.053123][T15631] ? kmsan_report+0x1d0/0x220 [ 510.058707][T15631] ? kmsan_get_metadata+0x39/0x350 [ 510.063864][T15631] ? kmsan_report+0x1d0/0x220 [ 510.068672][T15631] ? shmem_file_llseek+0xdc0/0xdc0 [ 510.073918][T15631] generic_file_splice_read+0x730/0xac0 [ 510.079721][T15631] ? splice_shrink_spd+0x100/0x100 [ 510.084989][T15631] splice_direct_to_actor+0x587/0x1130 [ 510.090602][T15631] ? do_splice_direct+0x580/0x580 [ 510.095749][T15631] do_splice_direct+0x342/0x580 [ 510.101092][T15631] do_sendfile+0x1010/0x1d20 [ 510.106023][T15631] __se_sys_sendfile64+0x2bb/0x360 [ 510.111264][T15631] ? syscall_return_slowpath+0x90/0x610 [ 510.117051][T15631] __x64_sys_sendfile64+0x56/0x70 [ 510.122126][T15631] do_syscall_64+0xb6/0x160 [ 510.127202][T15631] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 510.133202][T15631] RIP: 0033:0x459f39 [ 510.137208][T15631] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 510.157357][T15631] RSP: 002b:00007fe726b83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 510.165798][T15631] RAX: ffffffffffffffda RBX: 00007fe726b83c90 RCX: 0000000000459f39 [ 510.173791][T15631] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 510.182317][T15631] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 08:06:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 510.190490][T15631] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007fe726b846d4 [ 510.198485][T15631] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 510.282569][T12560] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 510.332499][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 510.368470][T15637] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 510.368470][T15637] program syz-executor.1 not setting count and/or reply_len properly 08:06:36 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003ef5da08b1134200f5f2000000010902240001fb0000000904f40002827da90009050100000000000009058c000000000000a84355a5c07435f7841b04479a61849089b0f6281c39340c6de5ff335d49535e6095b276cfb1888d1a1e07b805b5b9d443445dad8d877894336fd2d519d8673fb8235d03fe1fa8b30501601cc2e504a9c0d86986cc23d576ca47603739bb63097b7a0d961c6096f348ab41a1bb"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/R\xdd\b\x0fzshot\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x7f, 0x0, 0x8, 0x7f, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x400}, 0x1, 0x4, 0x450, 0x6, 0x7, 0xffffff7f, 0xffe0}, r5, 0x6, 0xffffffffffffffff, 0x4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)={0x200, 0x6, 0x0, [{0xfffffffffffffffc, 0xffff, 0x80, 0x7c, 0xaa, 0x81, 0x6}, {0x7fffffff, 0x1f, 0x6, 0x1f, 0x80, 0x21, 0x20}, {0x800, 0x81, 0x9, 0x20, 0x7f}, {0x0, 0xfffffffffffffffa, 0x286f, 0x6, 0x80, 0x66}, {0x80000000, 0x4, 0x1ff, 0x0, 0xff, 0x2, 0x80}, {0x6, 0x2, 0x7ff, 0x1, 0x3, 0x9, 0x3}]}) [ 510.458348][ T12] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 510.467058][ T12] usb 4-1: config 0 has no interface number 0 [ 510.473504][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 510.483588][ T12] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 510.494963][ T12] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 510.508279][ T12] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 510.517564][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:06:36 executing program 0 (fault-call:4 fault-nth:5): r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 510.582537][T12560] usb 6-1: Using ep0 maxpacket: 8 [ 510.690613][ T12] usb 4-1: config 0 descriptor?? [ 510.705231][T15644] FAULT_INJECTION: forcing a failure. [ 510.705231][T15644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 510.722548][T15644] CPU: 1 PID: 15644 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 510.731468][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.742108][T15644] Call Trace: [ 510.743308][T12560] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 510.746554][T15644] dump_stack+0x191/0x1f0 [ 510.746647][T15644] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 510.754850][T12560] usb 6-1: can't read configurations, error -22 [ 510.759673][T15644] should_fail+0xa3f/0xa50 [ 510.776722][T15644] should_fail_alloc_page+0x1fb/0x270 [ 510.782286][T15644] __alloc_pages_nodemask+0x3c1/0x60c0 [ 510.787961][T15644] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 510.794305][T15644] ? __module_address+0x68/0x5e0 [ 510.799329][T15644] ? is_bpf_text_address+0x3c5/0x4b0 [ 510.804735][T15644] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 510.810741][T15644] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 510.817016][T15644] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 510.822978][T15644] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 510.828915][T15644] alloc_pages_vma+0xc9d/0x18c0 [ 510.833823][T15644] shmem_alloc_and_acct_page+0x771/0x1170 [ 510.839592][T15644] ? kmsan_get_metadata+0x39/0x350 [ 510.844766][T15644] shmem_getpage_gfp+0x1ae2/0x3f80 [ 510.850023][T15644] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 510.856196][T15644] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 510.862258][T15644] shmem_file_read_iter+0x4f3/0x1140 [ 510.867763][T15644] ? shmem_file_llseek+0xdc0/0xdc0 [ 510.872936][T15644] generic_file_splice_read+0x730/0xac0 [ 510.878735][T15644] ? splice_shrink_spd+0x100/0x100 [ 510.884000][T15644] splice_direct_to_actor+0x587/0x1130 [ 510.889632][T15644] ? do_splice_direct+0x580/0x580 [ 510.895992][T15644] do_splice_direct+0x342/0x580 [ 510.900939][T15644] do_sendfile+0x1010/0x1d20 [ 510.905720][T15644] __se_sys_sendfile64+0x2bb/0x360 [ 510.910952][T15644] ? syscall_return_slowpath+0x90/0x610 [ 510.916557][T15644] __x64_sys_sendfile64+0x56/0x70 [ 510.921618][T15644] do_syscall_64+0xb6/0x160 [ 510.926159][T15644] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 510.932098][T15644] RIP: 0033:0x459f39 [ 510.936300][T15644] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 510.956136][T15644] RSP: 002b:00007fe726b83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 510.964589][T15644] RAX: ffffffffffffffda RBX: 00007fe726b83c90 RCX: 0000000000459f39 [ 510.972670][T15644] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 510.980768][T15644] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 510.988848][T15644] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007fe726b846d4 [ 510.997032][T15644] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 511.048098][T12833] usb 4-1: USB disconnect, device number 38 [ 511.155432][ T50] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 511.172832][T12560] usb 6-1: new high-speed USB device number 27 using dummy_hcd 08:06:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 511.257600][T15650] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 511.257600][T15650] program syz-executor.1 not setting count and/or reply_len properly [ 511.402530][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 511.412404][T12560] usb 6-1: Using ep0 maxpacket: 8 08:06:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', 0x44000, 0x8) recvfrom$unix(r0, &(0x7f0000002980)=""/249, 0xf9, 0x2, &(0x7f0000002a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = gettid() r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ftruncate(r3, 0x1000000) sendfile(r2, r3, 0x0, 0xeefffdef) r4 = gettid() write$apparmor_exec(r2, &(0x7f0000000080)={'stack ', '(vmnet1\x82@%user*\x00'}, 0x16) tkill(r4, 0x1000000000013) timer_create(0x4, &(0x7f0000044000)={0x0, 0x37, 0x6}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000013) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) [ 511.552866][ T50] usb 3-1: config 251 has an invalid interface number: 244 but max is 0 [ 511.561391][ T50] usb 3-1: config 251 has no interface number 0 [ 511.568477][ T50] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f2.f5 [ 511.572601][T12560] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 511.577902][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.586059][T12560] usb 6-1: can't read configurations, error -22 [ 511.609380][T12560] usb usb6-port1: attempt power cycle [ 511.653775][ T50] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 511.850804][ T50] usb 3-1: USB disconnect, device number 44 [ 511.858128][T12616] usb 3-1: Failed to submit usb control message: -71 [ 511.865998][T12616] usb 3-1: unable to send the bmi data to the device: -71 [ 511.872660][T12833] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 511.873263][T12616] usb 3-1: unable to get target info from device [ 511.873342][T12616] usb 3-1: could not get target info (-71) [ 511.894345][T12616] usb 3-1: could not probe fw (-71) 08:06:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 512.107317][T15661] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 512.107317][T15661] program syz-executor.1 not setting count and/or reply_len properly [ 512.129633][T12833] usb 4-1: Using ep0 maxpacket: 8 [ 512.263486][T12833] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 512.271965][T12833] usb 4-1: config 0 has no interface number 0 [ 512.278405][T12833] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 512.290117][T12833] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 512.301174][T12833] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 512.314389][T12833] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 512.324678][T12833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.336508][T12833] usb 4-1: config 0 descriptor?? [ 512.349772][T12560] usb 6-1: new high-speed USB device number 28 using dummy_hcd 08:06:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) exit(0x4b) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f0000000040)="6cbc7a3402d21c8775285b6b6614eb202363b5aeb7b33414f7daf4097ae78eaf6c8fa3ba92acc63a5422b7839deba70510e50cc1bd8772dcff1e3e6bef9df75e635cf60222a8fe13e539c40249eaebe5319f8dcbc8cc43df698c564e42ae20baaa8323ff86b59c4017b0bb83b8ea416617d078ef09bcc4bcec920bf5681096e2be26ab86fd2b58006275424eec0c6fe96e1eccbacdcfc4ee2162d1ea0fe6640f584aec2b4dec55351d60d1b392fb05b748658fb7c2d5ee3f4fa5464d71e9fc40d30eb5e941877a2c1e7bfa7341b6c016432f66db4ba684bb8ead885b570fbc27a9ec2486a25211e7", 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xe4ffffff, 0x27}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x70) 08:06:38 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="1b5dd532419b7794bb756696c782eaf0d24edbc08520ffe574904aa2e4615c4167cd380ff6d0a0521ceb7f455aa9191a814b28f0eb310e62bcb720817b44408821ba69cfeac976fd8663817158389564be004ec2a29b6e1db72833b9db3a", 0x5e}, {&(0x7f0000000440)="6d6647014eb8aa11310f92c8d1806754392ce7f63268706c0898fdcaff5e329ddcd37c19fb43b788c527c65ee96bf4054703bf4b91ca2ce9c9ab7c587e102d7b931d07c85191e9235fd2769ca56a49ffd0ebc94aa822d37e5d71fba1f989f4b5bbdc0058ec1539d26803f9232e092f3ba218776be905bff17e3f592caf1df588ca17805c58ecbd40da4032f037803a7acfab447778a7a6e6ea052b9519a9785082766c61e7327381", 0xa8}, {&(0x7f00000000c0)="eba08dceb8e208b7e427d24ed347b1fe0a235d156c8d40d3", 0x18}], 0x3, &(0x7f0000000500)=[{0x50, 0x84, 0x2, "d23f35e9ce50872aa3a9946bd92ec3940277af5204da521c233fa274b7c87ac1e772b41e559d8844ff87efa90a4c2c2b942b25037fc208ac2255862b1ae4a7"}, {0x88, 0x19e, 0x1, "e9fcafd8f94f746c4e9c39bf9335e4e328066f361bee4f9fb6b2036f3f09571bfaacb5934b017b26951203e533792914074424f0c80327df1f6ae36318d6c07fedc3f49359e332e273786eace50db8326940e2148057bd351673613af00681a8e33dda9a433b571aea31100d8e9a80594de99af991"}], 0xd8}, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 512.578463][ T2855] usb 4-1: USB disconnect, device number 39 08:06:38 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 512.642358][ T12] usb 3-1: new high-speed USB device number 45 using dummy_hcd 08:06:38 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000240059cfa1460c4390e50d0000000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70"], 0x3}}, 0x0) ioctl$VIDIOC_G_EDID(r5, 0xc0285628, &(0x7f0000000240)={0x0, 0x32e4, 0x101, [], &(0x7f0000000200)}) splice(r0, 0x0, r1, 0x0, 0x100000003, 0x0) [ 512.773620][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:06:38 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x126}, 0x0) 08:06:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 512.922299][ T12] usb 3-1: Using ep0 maxpacket: 8 08:06:39 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff13}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 513.059129][T15689] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 513.059129][T15689] program syz-executor.1 not setting count and/or reply_len properly [ 513.083919][ T12] usb 3-1: config 251 has an invalid interface number: 244 but max is 0 [ 513.092502][ T12] usb 3-1: config 251 has no interface number 0 [ 513.098916][ T12] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f2.f5 [ 513.109159][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.243345][ T12] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 513.440440][T12833] usb 3-1: USB disconnect, device number 45 [ 513.446936][T12776] usb 3-1: Failed to submit usb control message: -71 [ 513.454790][T12776] usb 3-1: unable to send the bmi data to the device: -71 [ 513.462997][T12776] usb 3-1: unable to get target info from device [ 513.469450][T12776] usb 3-1: could not get target info (-71) [ 513.475613][T12776] usb 3-1: could not probe fw (-71) 08:06:39 executing program 3: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000fed000/0x11000)=nil, 0x11000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000180)='ppp0!\x00', 0x6, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r12, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r16, 0x1, 0x0, 0x0, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r14, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r16, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x40044) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f0000000040)={0x1, 0xcc, 0x5, 0x65e4}, 0x8) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000fef000/0x2000)=nil) writev(r6, &(0x7f00000003c0), 0x63) ioctl$TCXONC(r14, 0x540a, 0x2000000000) 08:06:39 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x2, &(0x7f0000000340)=ANY=[@ANYRESDEC], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='bridge_slave_1\x00') setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x20) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x2, 0x6, 0x8000, 0x97, 0x3}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 513.644545][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 513.661558][T15709] input: syz0 as /devices/virtual/input/input16 [ 513.701548][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:06:40 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r0, r0, &(0x7f0000000100), 0x100000001) eventfd2(0x0, 0x1800) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x100000001) 08:06:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x609a96cdf33e0515, &(0x7f0000000000)=0x6, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x22, {0x22, 0x0, "2f8138d64bce97d50d4bfe759de42220d22702bed88c9bd18b7a17b9d8921006"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 08:06:40 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = accept4(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x80, 0x80000) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000015000900000000000000007e00000000", @ANYRES32=r7], 0x18}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r10, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) bind$inet(r10, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r12}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r12}}, 0x18}}, 0x0) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xda42b1d619d158f5}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xd0, r13, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x1e, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8040}, 0x2011) 08:06:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000004000000000000001800000000000000000", @ANYRES32=0x0, @ANYBLOB="80000000000000003800120008000100736974002c0002000800080027000000080004000100000008000900290000000800090029000000080008003d000000"], 0x58}}, 0x0) 08:06:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(0xffffffffffffffff, &(0x7f00000001c0)=""/196, 0xc4) 08:06:40 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/76, 0x4c}, 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) [ 514.615062][T15731] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 514.615062][T15731] program syz-executor.1 not setting count and/or reply_len properly 08:06:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x2080) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="06295b721fcddfcb313d3c0ba715ab5aa7177d3c4574701779eaeeec27cb5b67baff5cb936108ad65f77c10c3b35f3ae9fa13e795c102b67a728d832d700d5be95113dd86ae9edd2a604130ca82b8f67f3") close(r2) 08:06:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(0xffffffffffffffff, &(0x7f00000001c0)=""/196, 0xc4) 08:06:40 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCLINUX3(r8, 0x541c, &(0x7f0000000100)) r9 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10) tkill(r0, 0x1000000000013) [ 514.808593][T15745] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 514.808593][T15745] program syz-executor.1 not setting count and/or reply_len properly 08:06:40 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 514.922222][T12833] usb 6-1: new high-speed USB device number 29 using dummy_hcd 08:06:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00000600000004f200000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 08:06:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(0xffffffffffffffff, &(0x7f00000001c0)=""/196, 0xc4) [ 515.182308][T12833] usb 6-1: Using ep0 maxpacket: 16 [ 515.211319][T15764] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 515.211319][T15764] program syz-executor.1 not setting count and/or reply_len properly [ 515.312526][T12833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.324200][T12833] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 515.333799][T12833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.365610][T12833] usb 6-1: config 0 descriptor?? [ 515.424484][T12560] usb 4-1: new high-speed USB device number 40 using dummy_hcd 08:06:41 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x1000000000013) r4 = getpgrp(r3) prlimit64(r4, 0xa, &(0x7f0000000000)={0x4, 0x9}, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 515.792331][T12560] usb 4-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 515.801988][T12560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.811935][T12560] usb 4-1: config 0 descriptor?? [ 515.845807][T12833] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x2 [ 515.854275][T12833] savu 0003:1E7D:2D5A.000C: unknown global tag 0xd [ 515.861140][T12833] savu 0003:1E7D:2D5A.000C: item 0 2 1 13 parsing failed [ 515.868964][T12833] savu 0003:1E7D:2D5A.000C: parse failed [ 515.874851][T12833] savu: probe of 0003:1E7D:2D5A.000C failed with error -22 [ 516.049648][T12833] usb 6-1: USB disconnect, device number 29 [ 516.312604][T12560] udlfb 4-1:0.0: vendor descriptor not available (-71) [ 516.342423][T12560] usb 4-1: Read EDID byte 0 failed: -71 [ 516.362452][T12560] usb 4-1: Read EDID byte 0 failed: -71 [ 516.382390][T12560] usb 4-1: Read EDID byte 0 failed: -71 [ 516.389325][T12560] usb 4-1: Unable to get valid EDID from device/display [ 516.426552][T12560] usb 4-1: submit urb error: -2 [ 516.435702][T12560] udlfb: probe of 4-1:0.0 failed with error -2 [ 516.502557][T12560] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 516.512475][T12560] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 516.532465][T12560] [drm:udl_init] *ERROR* Selecting channel failed [ 516.540078][T12560] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 516.563588][T12560] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 516.573337][T12560] [drm] Cannot find any crtc or sizes [ 516.578833][T12560] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 516.592386][T12560] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 516.599956][T12560] [drm] Initialized udl on minor 2 [ 516.609992][T12560] usb 4-1: USB disconnect, device number 40 [ 516.822350][T12833] usb 6-1: new high-speed USB device number 30 using dummy_hcd 08:06:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0xe314, 0x9) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="d2e9cb2a0b7c", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x30, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, r2, r1, 0x0, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, {[@generic={0x1, 0x6, "bc87b7b7"}, @eol, @exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0x4, 0x7, 0x20}]}}}}}}}}, 0x0) 08:06:43 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000000000004000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc40d116ade8e381d26d60e8f39cb0169b41c17565ac0816b9eb023b23933fdba8dd89040b2de90327c38c084f6b3d570df4601cd18578313fd1e11712eb0ee50ea163c709171e9a8cddd99c1763c69f6fb109e66ec161a0f8a7943e4ff7d2943847624a47c9d2051d215d314ecacc702bb73e6e8b1c79c90bdf399c786b1074511cb36c08746de08a28"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, 0x0, 0x0) 08:06:43 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'veth1_to_team\x00', {0x2, 0x4e22, @empty}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="08dca50d5e0bcfe47bf070") syz_emit_ethernet(0x8e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d8652b00580600fe8000000000000000000d12000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000090780000fe06e2d4c3d9050a00000000000000000303001312d31c8190da8dfe461d135b075be2c1c403030013125b3b4bc0ca96fcedefad47a621547516fe07f989accd96000000"], 0x0) [ 517.074087][T12833] usb 6-1: Using ep0 maxpacket: 16 [ 517.104030][T15778] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 517.104030][T15778] program syz-executor.1 not setting count and/or reply_len properly [ 517.137380][T15782] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 517.156626][T12833] usb 6-1: device descriptor read/all, error -71 [ 517.174424][T12560] usb 4-1: new high-speed USB device number 41 using dummy_hcd 08:06:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x70ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x200}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="5cc193bb9ab9c629b8d92e42418897c2ffdce6b4de696d077cb10d74b2bc634bb1dea623b78ad2f73b95a208fdcbe2d7655261584de8f5c133e813fdbd07d36c0eccdb30ba509ebc766169f33938c069e28f9c1113ed0e7d90b83e249fb471de3d5546c3b2597d2605a546a5c09b261ae173dd357b16c231a45d77de31f8d3e28bd9202240fe3f8570ca1dc06ef60fe8499a5f04ce542524fa845d33354245c8e6724ba02fa85a83cdf84a1fc47e606f4535732943f15566a3b60ac28a48135fd79b43dac763", 0xc6}], 0x1, &(0x7f0000000200)=[{0xd0, 0x104, 0x80000001, "aef484fa39c5608698b335c3df8e435ea3b434f4ac082b13d4928b7b1056425c4d5a124a88110aedc4da6d3ac678437747611d349e3c384a7e3051cc0f663ee5ea36a74b3fa0de8fdcbfb6af168eccb09dff446c1b240f099ca0ca08e07848d60505c445902b7798751321cc0ecd270ec20eb22c48d5389c5f7c2a13b1010bbafc94be1eea8f8efdc02a5e784554e2c5eaaed8640e0b0650de8b5789896f23c4dece9b9ccbe0ce38c52f2f5d2f96f4d6214e2c75fb180e5ba6a8"}, {0x110, 0x10e, 0x81, "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"}], 0x1e0}}, {{&(0x7f0000000400)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="fefff9703d2e1aa95b894eef91a2ee2c82f31be1a6b042b71235b3d9688c17ae2be7e476005744bfd9d3a7735788d4e23e0122a3fa08ac02ceb2ababfbe0c12d8b78bdbb56263af641e04249651c47a0c0db3b946da4e1abd6e6c903809da704207aa78ed8a55497c26f8af093ad370858797711aba586539c0632824eaec69dde99331597ac92ecd18f6d9d73d9cbfb80cf5fda6e2a45fd39f1afdc2aa82676529ca569543463fbd790654b789772506fa27ad756d373ffd530f2e753e55286fb28718c392bbcadd64b3240c82baad04b775e47ae828d5a637e311daf78832db35b1b9a5cb66c53ad3b69", 0xeb}], 0x1, &(0x7f00000005c0)=[{0x38, 0x10c, 0x58c, "689de286fbe5c4e318efe31af87f9c2617ec5606b79ad664087c447ef834b313d85fb567ccfa"}, {0xb8, 0x12, 0x8001, "cf42b758efdd9a3dec4ca21686f1f2d689dc65f9d043974477c7364b10e507db2b2184382114b6fc3b46168991fc7d3c71209e18065d44390320a1a0ab46b25ca7f08376acb2ba3256be4fb7654fb5aea20e7528151a601592261a4ba8aa47a7aae9b56c3f23691cf2e5f79ba0bc8106fe23403c733b7b2a6a8833a3e473ae2cdf39bb1df855d0d6c51a1ec405fd642f8c16f241cf67c0d7fbbe988c4917579531c8ad20f7463b79"}, {0x80, 0x88, 0x8fc, "0d87949d450f93b38f7e323bbd9f57f51aec2398abf26a66745b6a45cdd539a70721335c3045c0faaf7ba9d785121fa239aac560d78c3a07322271ea43848663fea2044fd0bca00f03a47bc3526a5339301c7d6ce6d86425e1fd1f44a60db6a9f5a2c89e4169db6bc4a0c36efc1e32e4"}], 0x170}}], 0x2, 0x800) 08:06:43 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd39d30000d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000240)={0xfff, 0x0, 0x2, 0x51, &(0x7f0000000080)=""/81, 0x65, &(0x7f00000001c0)=""/101, 0x6b, &(0x7f00000002c0)=""/107}) 08:06:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0xa}}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000600)="f3400f35400f01c966baf80cb8fed7b181ef66bafc0cb007eec44209bdc266b855000f00d8660f380191af77ffff0f30c4031102550e00c4c36540894e00000027c744240040000000c7442402f2ffffffff1c24", 0x54}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x297ef) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup3(r11, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x40a800, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x9, 0x0, "8c8f2ebd2746ad6c3c108b6c556232d89ad4981b76e75eef5d7679982cd00bed292bac737344a45da87ad62d5efa983118b47fe5a68c0c732f0bdae13035c963f850442dc2b46e96dcba0a6b111a14f8"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001480)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x0, 0x400000000000008, 0x0, "909cafa60fd10ab547327b06091159e9c0600ebf0202bea4340d7c27cc18f6968f76f26ac6f6e83ffdd95db9abcb6acddfc66504d914934ef0ade099a0437c4e373b5865bfe34344dd1f5b7a38bbe21e"}, 0xd8) listen(r1, 0x0) r14 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r14, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 08:06:43 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r3 = dup3(r2, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000040)={0x0, {0x4, 0x24e}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}}, 0x18}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getqdisc={0x40, 0x26, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0x6}, {0xffe0, 0xffe1}, {0xfff1, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000004}, 0x100) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000400)=0x0) close(r0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x121080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup3(r13, r14, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup3(r17, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r21 = accept4$tipc(0xffffffffffffffff, &(0x7f0000002940)=@id, &(0x7f0000002980)=0x10, 0x81800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup3(r22, r23, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x400200) [ 517.543251][T12560] usb 4-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 517.553105][T12560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.567253][T12560] usb 4-1: config 0 descriptor?? io_submit(r1, 0x20000000000000a4, &(0x7f0000002b00)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x5, r3, &(0x7f0000000440)="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", 0x3e1, 0x4, 0x0, 0x2, r10}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x200, r11, &(0x7f0000001440)="5ee1875d3819558900d0f82cce087ba51c15be55934b5348c9baa1d4539cc22eb9be8eb456683d551c46f06342250afc0056f418c9c316da77b2664521b8e291bf9929aec529bfc8c077e833177f2ffc2f97564ce8a826f0bfad971b55297267b95d7b94ea350fe5827f1d55dfee3600d4fa90c3aad4863b2fd8bfd8c21a70837efdbfcf038281e462fcc76f8215e1af61c63712f9f939dcdf91efcd8f5653802daa9228d161b4625c58133c2e27d1a0678df6baf9", 0xb5, 0x8, 0x0, 0x1, r10}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x7fff, r12, &(0x7f0000001540)="f2e8e4c507be625fad6ab280993e9f0203157bf5a1f227acb6cd329b6f87e726c33972b483358d5beb7932c2b5c940afa69cd940a953b1238d9f9f2c03b6bbfb46899c3f4c806c90d07b8f7589d7ff6b3ed4cf426fe6ffa5784d87de5e176b21a44e246bc5a07bdfc56f4764e5febe5df7eefa883b8c47c1fb1a10bf4b932fdd26d3a9e60c3c3cd3c3c38ace4064a448e5b3e449cf82fdac4be19f185bde7ac1d7319b424bdb55b96b7b5e9b047887668a003c3d61face958589eb5af015ae1150c7ff4cdf33915091477990ddea1391b0e9f936f0bd962929d51c", 0xdb, 0x6, 0x0, 0x0, r15}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x101, r16, &(0x7f0000001680)="6d5c20628c52617df883eec6e3fad78ea239fdf874676bf5582131244e81ba629550e829ddf1aee4fe3dc29b4072470eae76db001ea7eca8a88f235509b9e15e854733d3ee7d160327714c7befefd7cbadd148612f4a981e9244d831be854d584adb590a05fa45e0e3908b3f7506f8f20eb783560423e6f957e54c055ec3fe105a9e53b44fcc82e2485c2602a3e5fe6830a1155d10f61755151d1622157337b6467076bd53de974c6d1317da6fde780ff7de458e3613814174d635d7de7efa9b8feb9d660b3328cba424f43ba0eb21418ff2", 0xd2, 0x8, 0x0, 0x2, r19}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x101, r20, &(0x7f00000017c0)="f1b84b7bd06063c49940c1162c30985a1b0da59855a49aa16fbd2db935f8ee20e871a6b7b0e3bc743d1881787929389b3f3dfc6e1f8ebc9f28dd5fd4a2381228aaa1b3d352f78b3fc246a596333c2131e23a92f7eb67f54ff86cbf3ddf23c6fbfc484fe8298df89b4f1dff2cd24fe4ac4d2101db3addcb9f96b6413e917dbf36863308cac1b3c2bac252d17dcec8abf7e27c17a71721c2a3199c81e5b2ac1b230abf8b995ab1c779f85088f1ef05ae2bb964a057636e321c554603b58c24c280cd4bc2db19b50e9faa86ba485df0b88317", 0xd1, 0xfffffffeffffffff, 0x0, 0x0, r2}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x7, 0x600d, r15, &(0x7f0000001900)="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", 0x1000, 0x3, 0x0, 0x3}, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x5, 0x81, r21, &(0x7f00000029c0)="1aa7d37bda3270a8d0583c064ba147f1f3ef5aa43c126eeb37aed9fa12ec50fe3b1438e01ae142df7383f4aef3907572a6736420c3202fc61e2ef9d7076e6b256c22e6961e1a3ae9ab4d4cb0ccf82d7f519c9ac8349d5aac21b96b4a90ccb6272b8b6f5c5aef0c4fb7", 0x69, 0x6aec, 0x0, 0x3, r24}, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x6, 0x7ff, 0xffffffffffffffff, &(0x7f0000002a80)="392285e176f2c20b4ce39596a2d016df060946be76a311778e0e187075208a6db25aa21d3a6d09363a58120e8464d29d", 0x30, 0x3, 0x0, 0x2, r2}]) [ 517.883142][T12560] udlfb 4-1:0.0: vendor descriptor not available (-71) [ 517.903105][T12560] usb 4-1: Read EDID byte 0 failed: -71 [ 517.923118][T12560] usb 4-1: Read EDID byte 0 failed: -71 [ 517.945748][T12560] usb 4-1: Read EDID byte 0 failed: -71 [ 517.951537][T12560] usb 4-1: Unable to get valid EDID from device/display [ 517.994025][T12560] usb 4-1: submit urb error: -2 [ 518.004339][T12560] udlfb: probe of 4-1:0.0 failed with error -2 [ 518.062709][T12560] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 518.071562][T12560] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 518.093679][T12560] [drm:udl_init] *ERROR* Selecting channel failed [ 518.101261][T12560] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe 08:06:44 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000080)=""/63) [ 518.122480][T12560] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 518.131209][T12560] [drm] Cannot find any crtc or sizes [ 518.136997][T12560] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 518.149777][T12560] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 3 [ 518.157513][T12560] [drm] Initialized udl on minor 3 [ 518.166027][T12560] usb 4-1: USB disconnect, device number 41 08:06:44 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000300)="fa", 0xffffffffffffff07}], 0x1}, 0x800) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 08:06:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x233, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x1) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009cc0)=[{{&(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr, @broadcast}}}], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000000)=0xffffffff) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 08:06:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, 0x0, 0x0) 08:06:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = gettid() ptrace$peekuser(0x3, r1, 0x7) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpriority(0x1, r3) 08:06:44 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) r3 = gettid() tkill(r3, 0x1000000000013) sched_getaffinity(r3, 0x8, &(0x7f0000000000)) 08:06:44 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a0000009599d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc00"/241], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 518.615882][T15833] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 518.615882][T15833] program syz-executor.1 not setting count and/or reply_len properly 08:06:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x383, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 08:06:44 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1400000, 0x80081) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x23c, 0x16, 0xa04, 0x70bd28, 0x25dfdbff, {{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e21, 0xb5c3, 0x0, 0x1e0, 0xc0, 0x4, r6, r10}, {@in6=@mcast2, 0x4d5, 0x33}, @in6=@loopback, {0x2, 0x100000000, 0x1000, 0x1ff, 0xf90, 0x0, 0x8b8, 0x7}, {0x2, 0x24d8, 0x80000001, 0x9}, {0x2, 0x101, 0xd434}, 0x70bd27, 0x3507, 0x2, 0x3, 0x1, 0x4}, 0x93a, 0x1}, [@sec_ctx={0x40, 0x8, {0x3c, 0x8, 0x1, 0x3, 0x34, "a0645433f0c0e47fd46ccc1dea8ee83ec81f19e2820f9589fe7beae8a3668bfb8639ef7f8c1385b1cad0bea4dd4c404a88f129f9"}}, @policy_type={0xc, 0x10, {0x1}}, @algo_crypt={0xa4, 0x2, {{'xts(ctr-serpent-sse2)\x00'}, 0x2d8, "c73f4f3040c566acc7837b69adefc5175acab5f9c05bbbf5043a4d02bd4eb20fec0005bd45be6c138d39073b00737540abf6e24d1be3a1c35aa8fb3e89411e6ae72adf15154a2f6f4538bfe51bb1ff3dadf77178221e6b56ad0fc1"}}, @lifetime_val={0x24, 0x9, {0x6, 0x10000, 0x5, 0x4b65643b}}, @replay_thresh={0x8, 0xb, 0x6}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@mcast2, 0x2, 0x0, 0xff}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:44 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff07000100956fa283b724a600800000000000f4ff673540150024002e0034c41180ff0100000000000048a730de33a49868c62b2c891672d84982542a88f46fb1a654a6613b", 0x4c}], 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x39c5, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x7, 0x10000, 0x802, 0x9, 0x100, 0x5, 0x8000, 0x1000, 0x1, 0xfffff7b4, 0x10001, 0x1, 0xfffffff9, 0x20, 0x101, 0xaa, 0x9, 0x8, 0x5, 0x7, 0x3, 0xfffffffd, 0x409, 0x86, 0x1f, 0x23, 0xc3, 0x8, 0x1000, 0x80, 0x100, 0x7f]}) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492565, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @raw_data="1f4e22724ca67ed87c298ddd6c0bf40adba6584cd0c0c91742923de621070b5db1f4de3c94e21dd89f08e0ddb40657939d0fc929736a6b03a687bd2738a41aa43e08992dd8788fb7bdfc19adbd856d66857b0926c03f9cd22bfdfcc16aaad72602b9775a9091be4069452e06c08d8f1bf6367161e1b56254aa3bc9cc1d00963b2d02fbdc61be84ceb548df3f54724210103cef000c15158c4a84bd57d2e92fa337ca7190a3a074034b0170137e87a489d82d855519f042dcccc0269d1556545f630509568a02270c"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 08:06:44 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000001700)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/215, 0xd7}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000440)=""/83, 0x53}, {&(0x7f0000000300)=""/49, 0x31}], 0x8, &(0x7f0000001680)=""/106, 0x6a}, 0x2) sendfile(r1, r3, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RFSYNC(r8, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) r9 = dup2(r1, r5) ioctl$SG_SET_DEBUG(r9, 0x227e, &(0x7f0000001740)=0x1) 08:06:44 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x11, @loopback, 0x4e21, 0x4, 'wrr\x00', 0x0, 0xfffffffa, 0xb}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r1, &(0x7f0000004000), 0xffec, 0x0, &(0x7f0000002000), 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x4000030000000304, @broadcast}, 0x2, {0x2, 0x0, @rand_addr=0x4e3f}, 'team_slave_1\x00'}) 08:06:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00W\xcb\xd53\xc0g\x8a\x1c\xc8m\x8f\xd3\x90\x1f+\x81\x9b\x90\b&\xa5\xd60\xb9\x9e\xcc\xaf3\xea:\aL\x03l\\\xdd\x84\xeeL\xeb,\xa5\xc1\xd4\xd4\xa9I\x87\x06\xfbH>SL\xddsRA\xf2\xf5!JnO\xa7l$\x00V\xa4^\xc7.z)\xc3\f\xee\xce\xec\vM\xcb\xb7\xaa\"[\x19\f\x87\xe4kEmO#\xab`/\xba\xf1\xe3^@:\x86\xff\xc4c\x81\xf0t\x9f7x\xb6\xa3\xedj\\\xbd\x8aK*2|\xdf\xc2[\xbf\x87J\a\xed\b\x8c;\x00\xdf\xab\xcb2\xde\x1f\x90\x1cY\x17+\xb1\x808\xc0\n\x96\x9cVp\x8dq\xba}]\x97\xac\xc9\x91\t\xb4\x97\x11?\xfe\xdf\x00'/190) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xc5`\x8c\x1e\xab(\x15q|)\x80', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x28, 0x20001000) pkey_free(0xffffffffffffffff) 08:06:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f00000001c0)="43efac074b1dd986997422f4d0001106835c850aa65baeb4e6f3189c70f2398519d1433193ba808d6057a34a802f35a1a6fc9dcc7785ad502d2323ddb68b5c366914589d7c92c721d327826b64ebaf6f0a6520fb64d8088a92b862601227590946a41999b56b81cecc653ebec07d598fbff5cf611060e01ae93df473e514b0881bd4522d0acda0c5bc9faf16609d26b2560cea8bffad87c24389f9c215bd09419b5166cadefa1000885088f2b8bde93e04e32f408c1b90dca15471787adb30614f3ff82f8044a67c3e4bd5b753c9b2abab998ee43d53ea31", 0xd8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) sendto$inet(r4, &(0x7f0000000000)="758f0ebf19d16d316655499bfb48f60c49e405", 0x13, 0x88080, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 08:06:45 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r2, &(0x7f00000000c0)='mem\x00\x01y7SwaS.\x06\x95r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r1, r1, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000300001000000000000001000000000000006a5f6ddaa875ed4ac3fbd3bb752498d841d67d744787e21c1bfec355", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/59], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 08:06:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6b) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3, 0x301000) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x8000, 0x4, 0x1, 0x6, 0x1, 0x5}}, 0x50) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:06:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000001c0)={@multicast1, @empty}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40400, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000080)=""/155, &(0x7f0000000140)=0x9b) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0xffffffff, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0xc4}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a, @loopback}, 0x80, 0x0}}], 0x1, 0x0) [ 519.462679][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 519.463139][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 519.469101][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 519.513297][T15893] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 519.513297][T15893] program syz-executor.1 not setting count and/or reply_len properly 08:06:45 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x80002015}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x1, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x880, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000001c0)={'hwsim0\x00', {0x2, 0x4e21, @remote}}) r4 = accept(0xffffffffffffffff, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80) getsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000001440)={0x3, 0x1, &(0x7f0000000380)=""/79, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=""/1, 0xd000}) r6 = accept4(r4, &(0x7f0000001480)=@l2, &(0x7f0000001500)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x5, 0xde9}, &(0x7f0000001580)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000015c0)={r7, 0x1}, 0x8) r8 = syz_open_dev$radio(&(0x7f0000001600)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000001640)=0x4, 0x4) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000016c0), &(0x7f0000001700)=0x4) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001740)='/dev/cachefiles\x00', 0x119001, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000001780)=0x2) r11 = openat(0xffffffffffffffff, &(0x7f0000001880)='./file0\x00', 0x800000, 0x90) getsockopt$inet_sctp_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f00000018c0), &(0x7f0000001900)=0x8) pivot_root(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='./file0\x00') readlink(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)=""/24, 0x18) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x19, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000001ac0)={0x20000001}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000001b00)=0x1, 0x4) 08:06:45 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 08:06:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x1000, 0xfff, 0xce}) syz_usb_connect$hid(0x0, 0x18b, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 08:06:45 executing program 5: open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000640)=0xff, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x6, 0x2, 0x3000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000500)={0x7}, 0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000480)={0x1, 0x5, 0x9, 0x100, 0x401, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:06:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r10, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x400000, 0x0) r15 = dup3(r14, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x80000001, 0x541) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x40000008000004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x401) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r17 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r18 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) utimensat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x2710}}, 0x0) r19 = dup3(r9, r18, 0x80000) r20 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20440, 0x18d) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, r20, 0x17b0e000) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x2400, 0x400) 08:06:46 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair(0x8, 0x3, 0x82, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00100008", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r6, 0x6, 0x4, 0x5}, &(0x7f0000000080)=0x10) setrlimit(0x2, &(0x7f0000000140)={0x6b1a, 0xffffffffffffffe1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 520.022684][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 520.028984][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 520.035567][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 520.041881][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 520.049119][T12560] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 520.294653][T12560] usb 4-1: Using ep0 maxpacket: 8 [ 520.412919][T12560] usb 4-1: config index 0 descriptor too short (expected 64853, got 377) [ 520.421556][T12560] usb 4-1: config 30 has an invalid descriptor of length 249, skipping remainder of the config [ 520.432173][T12560] usb 4-1: config 30 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.444035][T12560] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 520.453402][T12560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.592764][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 520.705794][T12833] usb 4-1: USB disconnect, device number 42 [ 521.482294][T12560] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 521.722895][T12560] usb 4-1: Using ep0 maxpacket: 8 [ 521.782479][T12560] usb 4-1: device descriptor read/all, error -71 08:06:48 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) close(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:06:48 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf, &(0x7f0000000140), &(0x7f00000000c0)=0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x8001, 0x4) 08:06:48 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x105800) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0x4, 0x4) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80802, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) write$sndseq(r2, &(0x7f0000000280)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_usb_connect$cdc_ecm(0x0, 0x68, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x6, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x40, {{0xa, 0x24, 0x6, 0x0, 0x0, "8822d24b37"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x0, 0x40, 0x5f}, [@acm={0x4, 0x24, 0x2, 0x6}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x40}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3bf, 0x9, 0x6, 0xfb}}], {{0x9, 0x5, 0x82, 0x2, 0x3d3, 0x1f, 0x80, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0xf, 0x6, 0xdf, 0x9}}}}}]}}]}}, &(0x7f00000005c0)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00f30180000000004000"], @ANYBLOB="1c000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="050f1c00020310bf14100408e0702d91356fb4c206af0a4a88c8a699"], @ANYBLOB="0900000004000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="04032704"], @ANYBLOB="e6000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="e603b68f3047d0223f12efd21be45c11c3cfd71e6222c0b4cc977d75834692e331517f7307069dce5d7722df8f691eca0d656833093faa7d29ae89ebb8b879390ce4cf1f2ba5d54cfd2007f4b5479e8051235e5222ee4428a743c3c97b91875712a39a2b12342ed68cfd06dbd3a76af3667f72dd1f0afbc0830b4781e2934a2fe20c094e656884a84dcd82a6c9ef4fb1b185df587054b329e0148815733ebc8fc4d307c6823f272617d1eeba1cddc0ff1ee1bc2a73926c273f06a699b7f1e6be7781f7940bb8eb04fef38d84cb2f4e0bb93de74cb7f19fe62f26bbf4685acee5cde9584d997f"], @ANYBLOB="04000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="04033804"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="04031004"], @ANYBLOB='$\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="240363cd0d3fd0b04a6e3062f27931e3d0f154f6d676c4549e4646cb8dddfdd59cb01709"], @ANYBLOB='=\x00\x00\x00', @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="3d038c86268ee6f95498ac44d51ccd607e9c059dc62f3239571b7147a3228cfb9cd80c0eeb66b12dc1c6dab7a40f3a1c68b28df56fe2f51d058e6f7496"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="04030110"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="04032704"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="04034104"]]) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000001700)={0x14, &(0x7f0000000680)={0x0, 0x30, 0x1002, {0x1002, 0x21, "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"}}, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001880)={0x1c, &(0x7f0000001740)=ANY=[@ANYBLOB="000dc07833fc3076875656b7e75281043f332656cacbacd40b52480718076d6ae8dce67bc2b6877dcc46e865d121afbfbbe652f752a67b7b79ec46f87ef0e0c54e4805544273819e7007b284ef559998459c01a886823bbf37732f3f8df2a46ebc125325668fb6ee7c7e91654b5925f2e25767cca29332d66f5865f92cde715340f6e63b0b0ef0598dc7333515f3cb9bc52cbe1ff6decb99bacbada2d1275c12f900e00b7d678e"], &(0x7f0000001800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x4}}) r6 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0xe5bb, 0x20, 0x1, r6}) 08:06:48 executing program 1 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:48 executing program 3: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x40000, 0x0) openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) statx(r2, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0, 0x0) socket$packet(0x11, 0x998342d76a32501b, 0x300) [ 522.284950][T15946] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 522.284950][T15946] program syz-executor.1 not setting count and/or reply_len properly 08:06:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000140)="7a473990e12efb0966210ee8bdd2b055", 0x10) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x9, 0x2) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="e0711598b301c3bd4d7eb0a8cfeb6b02", 0x10) [ 522.358240][T15946] FAULT_INJECTION: forcing a failure. [ 522.358240][T15946] name failslab, interval 1, probability 0, space 0, times 0 [ 522.371392][T15946] CPU: 1 PID: 15946 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 522.379342][T15946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.389453][T15946] Call Trace: [ 522.392816][T15946] dump_stack+0x191/0x1f0 [ 522.397200][T15946] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 522.403157][T15946] should_fail+0xa3f/0xa50 [ 522.407659][T15946] __should_failslab+0x264/0x280 [ 522.412661][T15946] should_failslab+0x29/0x70 [ 522.417289][T15946] kmem_cache_alloc_trace+0xf7/0xd20 [ 522.422670][T15946] ? sg_read+0x34f/0x2ba0 [ 522.427239][T15946] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 522.433188][T15946] sg_read+0x34f/0x2ba0 [ 522.437418][T15946] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 522.443345][T15946] ? sg_remove_device+0x5f0/0x5f0 [ 522.448397][T15946] __vfs_read+0x1a9/0xc90 [ 522.452765][T15946] ? rw_verify_area+0x3a5/0x5e0 [ 522.457737][T15946] vfs_read+0x359/0x6f0 [ 522.461929][T15946] ksys_read+0x265/0x430 [ 522.466208][T15946] __se_sys_read+0x92/0xb0 [ 522.470659][T15946] __x64_sys_read+0x4a/0x70 [ 522.475213][T15946] do_syscall_64+0xb6/0x160 [ 522.479760][T15946] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 522.485681][T15946] RIP: 0033:0x459f39 [ 522.489617][T15946] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 522.509273][T15946] RSP: 002b:00007fd67b88dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 522.517871][T15946] RAX: ffffffffffffffda RBX: 00007fd67b88dc90 RCX: 0000000000459f39 [ 522.525874][T15946] RDX: 00000000000000c4 RSI: 00000000200001c0 RDI: 0000000000000003 [ 522.533872][T15946] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 522.541876][T15946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd67b88e6d4 [ 522.549878][T15946] R13: 00000000004c6609 R14: 00000000004dd358 R15: 0000000000000004 [ 522.622549][ T12] usb 6-1: new high-speed USB device number 32 using dummy_hcd 08:06:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="b50a000000000000611028ee0000000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe31}, 0x70) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4, 0x4, 0x8, &(0x7f0000ffb000/0x2000)=nil, 0x4}) 08:06:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[]}}, 0xbccd5e7089d46d5d) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x5, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x3f}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c8adecdf0066dfe1"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000340)={0x5, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "eea9a76841849d7d"}}, 0x48}}, 0x0) r4 = gettid() r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r6 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r6, 0x1000000) sendfile(r5, r6, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r7, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) 08:06:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x14000, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r3, 0xc0984124, 0x100000000000000) open_by_handle_at(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x210000) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r5, 0xeb, '\x00r%', "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"}}, 0x110) ioctl$UI_DEV_DESTROY(r1, 0x5502) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000040)=0x7fff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000440), &(0x7f0000000480)=0x4) socketpair(0x1, 0x1, 0x2e, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r10, 0x110, 0x2, &(0x7f00000003c0)=')security\x00', 0xa) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 08:06:48 executing program 1 (fault-call:4 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:48 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x100000000) r4 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x18f1) [ 522.892904][ T12] usb 6-1: device descriptor read/64, error 18 [ 522.984435][T15969] IPVS: ftp: loaded support on port[0] = 21 [ 523.110408][T15980] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 523.110408][T15980] program syz-executor.1 not setting count and/or reply_len properly 08:06:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) write(r1, &(0x7f0000000180)="ffe0a6ab226ae058b36c3ba8032f9cd62ff040876919517a18a05233aa8bdd314cd27fbe149e", 0x108) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x3, 'L|k'}, &(0x7f00000002c0)=0xb) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r8, 0x3}, 0x8) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000000000000dd0800ffff0000000000000000000074fbfc4c00000000000000deffffffffffffff000000ffffff03"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) 08:06:49 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000500)=ANY=[], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x1, 0x4a866b1c2f1c15cd, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100000}}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 523.540107][ T12] usb 6-1: device descriptor read/64, error 18 [ 523.812337][ T12] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 523.895796][T15980] FAULT_INJECTION: forcing a failure. [ 523.895796][T15980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.909343][T15980] CPU: 1 PID: 15980 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 523.918375][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.928453][T15980] Call Trace: [ 523.931778][T15980] dump_stack+0x191/0x1f0 [ 523.936549][T15980] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 523.942938][T15980] should_fail+0xa3f/0xa50 [ 523.947563][T15980] should_fail_alloc_page+0x1fb/0x270 [ 523.952972][T15980] __alloc_pages_nodemask+0x3c1/0x60c0 [ 523.958633][T15980] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 523.964984][T15980] ? update_stack_state+0xa12/0xb40 [ 523.970311][T15980] ? stack_trace_save+0x11c/0x1b0 [ 523.975362][T15980] ? stack_trace_save+0x11c/0x1b0 [ 523.980406][T15980] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 523.986607][T15980] ? update_stack_state+0xa12/0xb40 [ 523.992117][T15980] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 523.998397][T15980] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 524.004510][T15980] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 524.010978][T15980] ? update_stack_state+0xa12/0xb40 [ 524.016236][T15980] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 524.022365][T15980] ? __module_address+0x68/0x5e0 [ 524.027357][T15980] ? is_bpf_text_address+0x3c5/0x4b0 [ 524.032775][T15980] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 524.038918][T15980] alloc_pages_current+0x68d/0x9a0 [ 524.044104][T15980] __get_free_pages+0x33/0xc0 [ 524.048980][T15980] __tlb_remove_page_size+0x340/0x560 [ 524.054399][T15980] unmap_page_range+0x20c9/0x3f80 [ 524.059521][T15980] unmap_single_vma+0x43f/0x5e0 [ 524.064436][T15980] unmap_vmas+0x391/0x4b0 [ 524.069014][T15980] exit_mmap+0x50e/0xa00 [ 524.073309][T15980] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 524.079532][T15980] __mmput+0x148/0x590 [ 524.083695][T15980] mmput+0x83/0x90 [ 524.087455][T15980] exit_mm+0x6b7/0x770 [ 524.091547][T15980] do_exit+0xae4/0x3a70 [ 524.092284][ T12] usb 6-1: device descriptor read/64, error 18 [ 524.095786][T15980] do_group_exit+0x18a/0x320 [ 524.095892][T15980] get_signal+0xbf6/0x32f0 [ 524.095958][T15980] ? init_wait_entry+0x190/0x190 [ 524.116239][T15980] ? kmsan_get_metadata+0x39/0x350 [ 524.121508][T15980] ? kmsan_internal_set_origin+0x6a/0xb0 [ 524.127244][T15980] ? do_signal+0x56/0xe10 [ 524.131659][T15980] ? do_signal+0x56/0xe10 [ 524.136125][T15980] do_signal+0x6f/0xe10 [ 524.140392][T15980] ? task_work_add+0x251/0x2c0 [ 524.145317][T15980] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 524.151464][T15980] prepare_exit_to_usermode+0x2c5/0x4d0 [ 524.157067][T15980] syscall_return_slowpath+0x90/0x610 [ 524.162506][T15980] do_syscall_64+0xdc/0x160 [ 524.167089][T15980] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 524.173015][T15980] RIP: 0033:0x459f39 [ 524.177099][T15980] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 524.197014][T15980] RSP: 002b:00007fd67b88dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.205451][T15980] RAX: fffffffffffffe00 RBX: 00007fd67b88dc90 RCX: 0000000000459f39 [ 524.213434][T15980] RDX: 00000000000000c4 RSI: 00000000200001c0 RDI: 0000000000000003 [ 524.221583][T15980] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 524.229693][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd67b88e6d4 [ 524.237772][T15980] R13: 00000000004c6609 R14: 00000000004dd358 R15: 0000000000000004 [ 524.492448][ T12] usb 6-1: device descriptor read/64, error 18 [ 524.612513][ T12] usb usb6-port1: attempt power cycle 08:06:51 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020faffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a07008b22a8348fb2655f8041cbfe00000000850000002f000000b30000006458c2c62fc2868f0399d905003796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4779fd2b316da4f0de8163f6242fa7323f1740637c08468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e30975e551558055dc2dc00"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:51 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) write(r1, &(0x7f0000000400)="993cf78bab044a8765d050fbaa6109e3da816a7e329a46af6156eb7b26d6214abd8bb88e049ca5cb838dda46ee94931c62dc684c7cf75b74b6c86a8e513d8ca42370bae73ceb2440dc471423fe00dcee428ed35fc333943ba80bf1dad8c514d26834f1ec71d965d9ebd98fb1a906adaf05c5c9e106d5a653226763df8ccaf7f4844cda7a60dc7abababde30fd07f5fa808e2f3ba7f9d8772e259bdc5390a8d746c09174d034109ba43a7ba00d2d9c3c552593f16ca3b77", 0xb7) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x8f) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x801, 0x61ce], 0x3, 0x3, 0x9, 0xff, 0x5, 0x8000, {0x0, 0x3, 0xfff8, 0x6, 0x6, 0x1, 0x4, 0x8000, 0x0, 0x8000, 0x7, 0xd4, 0x6, 0x3, "24c26888281bfdf66453899c22fc5340d43149c8c9a009f5861edb20c023112b"}}) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000340)=0x8b36) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000300)={0x6, 0x400, 0x40d, 0x7, 0x2, 0x1f}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r4, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000380)=0x1c) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r5, 0x10000, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PIO_FONTRESET(r8, 0x4b6d, 0x0) inotify_init1(0xc0800) 08:06:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x380, 0x200007fd, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000001}) clock_gettime(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x9}, 0x2) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, 0x0) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:06:51 executing program 0: eventfd2(0xff, 0x1a7208116f73f73d) r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r4, 0x0) r5 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000000440)='em0cpus1\x95\xeb\xe6\xa2\xa5\x12\xb7V\xda\x8eo\x9ce\x0e\x8a\x9e\xc6!\xae\xe8\xf9I\xe4e\xb2q\xb9\xd9c\xc1n\xddg\xf17\xbf\xac\x19\xf8\xb0\x84\xad4\xc4\xa27\xe0\xdf\xfd\xf1\x98\xdb\x19\x97\x89\x9f\xf6Rr\xde7\xcb\xed&0\xa4\xb4):\x15\x8a\x91@<\x00\xbb\xbfm\xc8H\x95\xbb\xdea\x96Q\xef\x8a\x01\xf0<_\xfb\xb0\x98\xbc\x81#.\xc9\x93\xf1m\x91\xc5P\xe834\xcd\x14\x01\xe9K\x16\xde\x87I\xbf\x0f\xeb\xbe\xb4\x914\xa7>\xac\x16\x01\x9a\xe98]\xb1\xd4 \xcb\\\x1e1\xc3\xc91[,2w\xa2\xfa\x04<\xd0\xea\xe4\xb4', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r5, 0x0, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, r4, r6}, 0xc) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x3, {{0xa, 0x4e24, 0x8, @rand_addr="a80de5b7562c6cd06597588d97719b95", 0x5}}}, 0x88) 08:06:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="b59e74ee61814fb6290cb959ff0c3c80da153d882857b400eef21962931533ff23753709cde816b3b13f15f370e5462dd1b7f94cd80d87705f620bcf13a3d1bbe428f53e28c7290b469a62336473a32a3ab1824def1280b205b99c88d57cd5d929e3efbc086fc5e3934a879b91fc66a4d80616c711088d84a440dc4b547f21cf865ac86450019cf4cffed26e38ce462ba3bb469d11c885cb", @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRES32=r3, @ANYPTR64]], 0x19) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x0, 0x0, 0xa01}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x142) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={0x0, 0xad, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r2, 0x19, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x170, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x87}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x20, @mcast2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb9fc}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @remote, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x62}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd165}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x40000) [ 525.342324][ T12] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 525.496705][T15996] IPVS: ftp: loaded support on port[0] = 21 08:06:51 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581000001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x4000, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000600)={0x6, 0x9, 0xff, 0xcf2, 0x1}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r3}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e22, 0x3, @loopback, 0x8000}}, 0x20, 0xac, 0x10000000, 0x80000001, 0x4200000}, &(0x7f00000005c0)=0x98) r4 = syz_usb_connect$cdc_ecm(0x2, 0x235, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x223, 0x1, 0x1, 0x3, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x9, 0x24, 0x6, 0x0, 0x0, "c305542c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x0, 0x4}, [@mdlm_detail={0xcc, 0x24, 0x13, 0x3f, "b4ebc7f6d6f481a5804872ad2c6dea0c806b2ddd550d62d88345f1bfb99123dbdc03d6aef0971db3848f585ab0d528ee4846af590b47627a48dc103c7a1e9770b7c21e8d3fb094993486099102a4b52585dbf1bc9adf4f421158886664fdfc0d34880669431ed9f1fe543729bd1b140f3ea8e1222a38843226500e4c24b45848171eb42732a30d8e2308d38b96d10719ac576c82d35a84b0e5cbb9ac8b5ef0b078c2fe8deeda1e59e08e2a68a07b5c50fd0a9ea02acff68589d99303a4a84a7edc875bab4156bf33"}, @country_functional={0xc, 0x24, 0x7, 0x3, 0x400, [0x7, 0x1000, 0x8]}, @mdlm_detail={0x4, 0x24, 0x13, 0x1f}, @country_functional={0xe, 0x24, 0x7, 0x1, 0x0, [0x5, 0x33, 0x1ff, 0x401]}, @mbim={0xc, 0x24, 0x1b, 0x101, 0x5, 0x8, 0x8, 0x8, 0x87}, @mdlm_detail={0xe5, 0x24, 0x13, 0x2, "82315f0cc0831c5d98ee002052bce3f4784977f50e129bb2e6ac2017cdf0b5b8828560d0b2734cd3db43777945deb3790ccb7c063f9a68de1dc3c84287046490be79b48965927902f80b24189967ec4daac1852535fc3de2676e577c8f39c9c4622aed754b7b81dc51899cd07095b38a93e683bc74175f17fb5b4b5831c0a154f39df3a9b96b7b9ea2e4550aa0ac4c39898c54579a8bacefa7621969f5dfc3f56642a49bc2788fb4943481475891c7ba2fabb3a4d78f8d1b94e0db048d0977a836f8f92adbdac12c95ae5989b04910b1115e6591d5e2be41826999257de40f9c70"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x379, 0x80, 0x85, 0xea}}], {{0x9, 0x5, 0x82, 0x2, 0x1c7, 0x15, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x34, 0xd1, 0x1f, 0x2}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x8, 0x4, 0x7, 0x9f, 0x7}, 0x1a, &(0x7f00000002c0)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x68, 0x9, 0x6, 0x5, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x1, 0x2e}]}, 0x3, [{0xb, &(0x7f0000000300)=@string={0xb, 0x3, "4f32bfcb4c1a4a653c"}}, {0x100, &(0x7f0000000340)=@string={0x100, 0x3, "498d8a306389a2483aa6f2d08b7d500805971116520a690529cd100aaa86bae8b0dce055ea1bae76c2e62ab417020440bbddc7ece34b7da8f301376eb1e65478964e7bab53dc9a8aced37e5a5db81579dc066c696cbf157824abd67bdae3fc829704d1c22a4cf4fb4d58ea92069a5759eaac124bb51c3edb8595998ae5607fd4a165271c79c4a23708f882ef7c254b2d93be1d55f04d3d5ac1aca17996583a6d5d43e06257ec2a5283c2b3ee87d043d3908fd0e6311308c4f2277d9cd4b8e90adbdc63e372faf6a56156566f84a109c5933ba179766136acbd89443bdf5df04a85844c9cdc7621109bb080d692cc35963830e9e64583bbcd01676bd84a9c"}}, {0x2, &(0x7f0000000440)=@string={0x2}}]}) syz_usb_disconnect(r4) [ 525.578280][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 08:06:51 executing program 0: gettid() r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/227, &(0x7f0000000100)=0xe3) sendfile(r0, r1, 0x0, 0xeefffdef) r2 = gettid() tkill(r2, 0x1000000000013) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x181c00, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) clone3(&(0x7f00000004c0)={0x200000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), 0x1c, 0x0, &(0x7f0000000280)=""/191, 0xbf, &(0x7f0000000440)=""/104}, 0x40) r3 = gettid() r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fsetxattr(r4, &(0x7f0000000540)=@known='trusted.overlay.upper\x00', &(0x7f0000000580)='#hself%cpusetcpuset/\x00', 0x15, 0x2) tkill(r3, 0x1000000000013) tkill(r3, 0x18) 08:06:51 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfb56}, &(0x7f0000000080)=0x8) r7 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 525.910003][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 08:06:52 executing program 5: setsockopt$sock_void(0xffffffffffffffff, 0x1, 0xdce4d2c831c2617d, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 526.069217][T16028] input:  as /devices/virtual/input/input18 [ 526.075464][T16028] input: failed to attach handler leds to device input18, error: -6 08:06:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}, {{{0x9, 0x5, 0x81, 0x3, 0xd3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000004c0)="97") r1 = fcntl$dupfd(0xffffffffffffffff, 0x80c, 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x0, 0x300}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x40, 0x0, [0x80, 0x10000, 0x3ff, 0x0, 0x6, 0xd6f9, 0x8, 0x400, 0xff, 0x4, 0x800, 0x8001, 0x7, 0xffffff03, 0x6, 0x400080]}, {0x16, 0x0, [0x6, 0x5, 0xec15, 0x1, 0x7, 0xf0, 0x0, 0x3, 0x4, 0xf122, 0x8000, 0x4c7a5454, 0x4, 0x7, 0x9, 0x4]}, {0x4, 0x0, [0xff, 0x9, 0x2, 0x10000, 0x100, 0x5, 0x401, 0x6, 0x7ff, 0x7ff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x80]}], r3, 0x1, 0x1, 0xd8}}, 0x20) syz_usb_ep_write(r0, 0x0, 0x9d, &(0x7f0000000180)="9e5ba09ce31224a5c7c1d33648021fae2d88e8554f6e70232677f6da88908565fdb060c2d85c121ec46f48d07d307ffe5ff6f62fc194dc695f6495a50089a4483628b7b8385b28d38b497b84030e3be1b45402385cb01f1d65da1bbc75dbf8792b56885ea5ab3b8313561089d1854902a458f0e65067cd8a20de5ad24f0760a26486fef1df3321220c3ebab7261abbe0a6aef780172f3c000000000000") syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0x22, {0x22, 0x0, "a4d9b1ce6a1541a5687a7490746f1d096cad1308cb87a01ffe4e83d10600b038"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 526.152281][ T50] usb 3-1: new high-speed USB device number 46 using dummy_hcd 08:06:52 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={r6, 0x8, 0x0, 0x7, 0x43e}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)={r7, 0x2, 0x20, 0xd63, 0x3}, &(0x7f0000000300)=0x18) r8 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r9 = socket$kcm(0x10, 0x2, 0x4) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000080)={0x834, 0x101, 0x1, 0x7}, 0x8) r11 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0xb0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f00000001c0)={{0x1, 0x0, @identifier="8c05f3756ccff52520d05f672ead02b6"}}) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:52 executing program 5: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={0x0}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0x8002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x1, 0x0, 'queue1\x00\x00\x02\x00\x1a\x00\x00\x00\x00\x1d\x00\x00\x00\x00\x11\x01\x00\x00\x00\x00\x00\x00\x14\xff\a\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000640)={0x166}) 08:06:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e22, @multicast1}, 0x968ca1a240537440, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0), 0x10000, 0x0, 0xff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000000080)=""/31) [ 526.402537][ T50] usb 3-1: Using ep0 maxpacket: 8 08:06:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x9547c5ad771bd646, 0x0, 0x0, 0x335) r5 = open(&(0x7f0000000140)='./file0\x00', 0x101, 0x2d0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="21000020000000020025a2e4ba836cf817c8c967f4772af172335d3b21aa2893f2039d219171568e2df14cb41d49e39e3cade3fdc7b3b7516e8beb69be24b027f0860881a4daed87c9e0288918142b4da722a5e91659c3c6076fa238df29acd8589ccc7442a29bee"], 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 526.433548][T16050] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 526.433548][T16050] program syz-executor.1 not setting count and/or reply_len properly 08:06:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 526.543029][ T50] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 526.553650][ T50] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 526.565236][ T50] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 526.574614][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.582395][T12560] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 526.644276][ T50] hub 3-1:118.0: ignoring external hub [ 526.651195][ T50] cdc_wdm: probe of 3-1:118.0 failed with error -22 [ 526.661018][ T50] usbvision_probe: Hauppauge WinTv-USB found [ 526.667795][ T50] usbvision 3-1:118.0: interface 0 has 1 endpoints, but must have minimum 2 08:06:52 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r7 = dup(r6) getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0x37, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f00000001c0)=""/55}, &(0x7f00000002c0)=0x78) r8 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r1, r8}) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 526.822871][T12560] usb 4-1: Using ep0 maxpacket: 8 08:06:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x402000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r6, 0x0, 0x300}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x0, {0xa, 0x4e24, 0x1, @mcast1, 0x6}, r6}}, 0x38) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="8500e7becff4400066000000b34eeabc3f22f5c7bb000000000778914c0b74211819d200608361290e00b1749a0b1c257569535e19de2ec1b46b909a05502c1c6fb8e0fcdb9a93b83247171cf3330566d57f1b2f55b47ba56dedde9fbc4bc6fe6a6b233be1b9fec7b136dc02059714caa73edd7e62283c00"/134], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$ppp(r1, &(0x7f0000000740)="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", 0x105) [ 526.942850][T12560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.954011][T12560] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 526.967161][T12560] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 526.976476][T12560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.062868][T12560] usb 4-1: config 0 descriptor?? [ 527.232598][ T50] usb 3-1: USB disconnect, device number 46 08:06:53 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0xffffffffffffff38, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 528.094926][T12560] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x2 [ 528.102421][T12560] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x4 [ 528.109745][T12560] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x1 [ 528.120159][T12560] corsair 0003:1B1C:1B3E.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 528.132347][ C0] usb 4-1: input irq status -75 received [ 528.152348][ C0] usb 4-1: input irq status -75 received [ 528.356932][ T50] usb 4-1: USB disconnect, device number 45 08:06:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYRES64, @ANYRESHEX=r1, @ANYRESHEX=r5], @ANYRES64=r2, @ANYRESOCT=r3, @ANYRESOCT, @ANYRESHEX=r4], @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x2a) recvmsg$kcm(r2, &(0x7f0000000900)={&(0x7f00000002c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000740)=""/80, 0x50}], 0x6, &(0x7f0000000840)=""/156, 0x9c}, 0x10004) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:54 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0xfffffffd) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet6(0xa, 0x80000000000003, 0x3) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000140)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) r3 = accept(r1, &(0x7f0000000040)=@sco, &(0x7f0000000180)=0x80) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x98) 08:06:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c0bb9b40b72040158fef0000000109021200010000000009046a0000ff00000017bdac6036b57a454fa9742e88498927d316f930e768107b8936f25a370651e5b9f00cd844d4aca7a3e054685b93a66b3fc0e3ddbc09753d3c4a247cf19907"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x7f, 0x200, 0x3, 0x2, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x0, 0x5, [0x1, 0x3, 0x0, 0x8000, 0x1]}, &(0x7f0000000180)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001c40)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYPTR, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0}) [ 529.132465][T12560] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 529.162397][ T2855] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 529.372322][T12560] usb 4-1: Using ep0 maxpacket: 8 [ 529.492893][T12560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.504647][T12560] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 529.518746][T12560] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 529.528623][T12560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.539181][ T2855] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 529.549406][ T2855] usb 3-1: config 0 has no interface number 0 [ 529.556298][ T2855] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 529.566221][ T2855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.576711][T12560] usb 4-1: config 0 descriptor?? [ 529.582889][ T2855] usb 3-1: config 0 descriptor?? 08:06:55 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) ftruncate(r2, 0x1000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000040)={0x3, 0x1}) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) fcntl$dupfd(r4, 0x406, r6) 08:06:55 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffe669a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000040)) 08:06:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x3, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x3}}, 0x1c}}, 0x0) 08:06:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400901}, 0xffffffffffffff45, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x1, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1dd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x163f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c005889) read(r0, &(0x7f00000001c0)=""/196, 0xc4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) fcntl$setpipe(r2, 0x407, 0x8000) [ 529.961155][T16107] input: syz1 as /devices/virtual/input/input20 [ 529.969957][T12560] usbhid 4-1:0.0: can't add hid device: -71 [ 529.976982][T12560] usbhid: probe of 4-1:0.0 failed with error -71 [ 529.996494][T16111] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; 08:06:56 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) dup3(r2, r1, 0x6bd4c178d8bb4fa6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r5 = dup3(r0, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="ac7f6f9cee11248234afb5bac7f62801639294ad1a2e1eea0b952ae0d474bbc6925dd52f691d216f85fc2385eb9a285becb890da952225463c64c5bd18ab9d41c8b2fac2bf1ca6bc7a04d8b41abb94d44fc6e6fa956755925aefe3f14e2281de061addad3ddff731ed209cc52de745864a0df1f38134bcc64abe6d24b730feb6fadb298f3a963911bc89b239ac99b90eb77c8e0d8c3836", 0x97}, {&(0x7f00000002c0)="0923af3939da576df3e0a646919a2e4ee9a6052a7cd9f20e2a48d0146c434b38d86b06d86fd21322007d47d8e7a5a6dfe574d865b22af33c43f248547a69597d5ec223e2565f9123640034823a383afc2228def77be7cc5b65df087175", 0x5d}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000000000000201000009880000"], 0x10}, 0x20014804) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000300eab11b096e8e0ebaf7f97540abcd65a8a8200f85d2fb5eda2a40bbe645141dc417fc432bc0a66e6ca77268ea6b072133a98b2a531b01521fa7aff4681dc3bee9895ed044d3847009df5f26755ecd1da8864335cef4ed66fee8", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r7, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) getpeername$inet(r7, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) [ 529.996494][T16111] program syz-executor.1 not setting count and/or reply_len properly [ 530.063321][T12560] usb 4-1: USB disconnect, device number 46 08:06:56 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 040'], 0x1, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x409000, 0x20) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x2, &(0x7f0000ffc000/0x1000)=nil, 0x4) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@del={0xf0, 0x11, 0x4, 0x70bd2c, 0x25dfdbfd, {{'ctr(anubis-generic)\x00'}, [], [], 0x3000, 0x2000}, [{0x8, 0x1, 0x20}, {0x8, 0x1, 0xec}]}, 0xf0}, 0x1, 0x0, 0x0, 0x660cd}, 0x40) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0xf15329f996dc08da, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) socket$alg(0x26, 0x5, 0x0) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 08:06:56 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x1, 0x4, 0x7fffffff, 0x9, r7}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f00000001c0)={0x81ff, 0x0, &(0x7f0000fff000/0x1000)=nil}) 08:06:56 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) r6 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x355, 0x2002) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x24) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)=0x5) [ 530.282731][ T2855] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71 [ 530.291717][ T2855] usb 3-1: Firmware version (0.0) predates our first public release. [ 530.300853][ T2855] usb 3-1: Please update to version 0.2 or newer [ 530.308425][ T2855] usb 3-1: atusb_probe: initialization failed, error = -71 [ 530.316394][ T2855] atusb: probe of 3-1:0.106 failed with error -71 [ 530.351919][ T2855] usb 3-1: USB disconnect, device number 47 [ 530.388007][T16130] encrypted_key: key user:syz not found 08:06:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1000000000000000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYBLOB="a46e0d126924b80894d28559fd321be00447f4c2f1b15d552611164b6914dc2f07ed90d0649d64c7c68d0a", @ANYRES32, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES64=r0], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX=r2], @ANYBLOB="09af8a7033e94174f74b06473ca4b6842038142b96e2eb0b7b98bd12ced234f980b5890e4338d3eeebee54c2eb7bb2f685a2d6260f500433bbdba904d521a19c4a0fce06615d27ff83c77d085c5c8563551ec304f8a16b8c40551dd6582a8d19f762cf8a9aeeab65b0d6bad2c944111366a64138e1c4775a493aa60d", @ANYRES16=0x0, @ANYBLOB="8b71496aa65de948073324e6f4f0f7811975b7c46f42d8119341b626cfcfa8288d557ca8efa9677ed72d2c01d2c0acb5627597e521651f3d517ea518aa146eaa4caaa9ff3d37d80dc57bf0a385596837f87f90092ef1658c8f55bb48618d490f84b474a6951e70d53f59dfcb7e4b3a8722346e20cd274c37cbfb38b2bf50f6d432d6a576de17e18e3b1a945ab35448f1b3", @ANYBLOB="d19a4e55a554ba11e3b9d0f63c34c28bc6e5ea21c5185f4def055062ea7d74a4837e7d23487edae3071ccb35cc51341bafabc2f36fe644f1693558f9cdbba81aaf3e1cb518976cf0b1d10b723e9836a80e4d7a5ebfbeba03643b60a091421beaf9f93a6bb3f1bd51b1473f3a8cc4cde91e2f7879b3844708cbcfc3905e161b802c79510a4203425597d9be916ce0609a0164c5201582462f0cecec282ed5e0178e08"]], 0x0) [ 530.391783][T16133] encrypted_key: key user:syz not found [ 530.422724][ C0] net_ratelimit: 11 callbacks suppressed [ 530.422749][ C0] protocol 88fb is buggy, dev hsr_slave_0 08:06:56 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000080)='\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x71, 0x8001, 0x8001, 0x0, 0x31ca, 0xffff23c1}) tkill(r0, 0x1000000000013) 08:06:56 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdba}, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10080, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x778, 0x12) [ 530.657123][T16147] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 530.739693][T16116] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 530.739693][T16116] program syz-executor.1 not setting count and/or reply_len properly [ 531.052403][ T50] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 531.442400][ T50] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 531.451697][ T50] usb 3-1: config 0 has no interface number 0 [ 531.458389][ T50] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 531.468265][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.478796][ T50] usb 3-1: config 0 descriptor?? [ 531.772560][ T50] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -71 [ 531.781308][ T50] usb 3-1: Firmware version (0.0) predates our first public release. [ 531.791659][ T50] usb 3-1: Please update to version 0.2 or newer [ 531.800057][ T50] usb 3-1: atusb_probe: initialization failed, error = -71 [ 531.807894][ T50] atusb: probe of 3-1:0.106 failed with error -71 [ 531.819417][ T50] usb 3-1: USB disconnect, device number 48 08:06:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffeb7, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x5, 0x4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffeb7, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000c0b9010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800050000000000"], 0x3c}}, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 08:06:57 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ftruncate(r3, 0x20) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:06:57 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f00000000c0)) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffd11, 0x0, 0xfffffffffffffe74}, 0x4060800) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xff702d88cb8f8d3d, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f00000002c0)) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) fcntl$getflags(r8, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r7, 0xc08c5336, &(0x7f00000001c0)={0x1, 0x1f, 0x8000, 'queue1\x00', 0x5}) 08:06:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:utempter_exec_t:s0\x00', 0x25, 0x6) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:06:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x8f) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) write$binfmt_script(r2, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x6}, 0x8) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000140)={0x0, 0xffffffe1}) unshare(0x40000000) 08:06:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="0f221266b98e0400000f32642e660f561e0000660f3881abf9ffd7f083360300020f00100f78a30b0065dce866b9800000c00f326635001000000f30", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7ff], 0x0, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80009ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000004000)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c, 0x0}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) fcntl$addseals(r3, 0x409, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 531.928024][T16173] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 531.928024][T16173] program syz-executor.1 not setting count and/or reply_len properly [ 532.090854][T16170] IPVS: ftp: loaded support on port[0] = 21 08:06:58 executing program 2: r0 = socket(0x10, 0x802, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'cgroup:selinux'}], 0xa, "aba660df3cfb0bc494cd3dd0a713e78f76700bbb800ba53b5da86e50bf620f5160f7f85b539788e091cb6bf99e8c99139448976490749ea6ac5cb8794c6a74c5ecba1fdce4921c9e1cf7f5c67464783cabd10002f13d28549fba6694e3b2149326f335d03dc6dd8da84ccf2cd4970962e711d4b7d4911c98e2e69a4763add74cdbfaa5d4e0"}, 0x9f) write(r0, &(0x7f0000000240)="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", 0xfc) 08:06:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup\x00\x1e\xa7\xd4\xea.G\x1c\x99\xa6\xb45\xfd\xbe\x80l(i\xe0\xda\x1e\xb5\x94\xf1y\xc8.\xe2c\xb8\xa0\x12\x9d\xae\x8f\xa9?/&\xe8\xe2\xa2(\\y<;\xc1$<\x8c5B?1\xe3\xba\x8a\xca/\xf5\xce0\xc5\x86\xcf\xad\'v\xbe\xfb\xb6\x8e\xd0>\xd6#\xe1^\xa5\xfb\xff\x03\xf8\x00\x00\x92<~y\xc5o\xb7\'V\xc8\\fP\xc6\x12\vd\xf1\xf4N\xd6\x13\x8b\xf6I\x17p\x91\"!\x80\xa8=\xa1\xa0\xda\xbb\xae\xf4\x96\xfb\xaf\xdf\x06\xf4\x93\t3\x97\x17\x97\xa6\t\x9a\fT\x8e\x81`\xdd\xb3+\x17g\xcb\xcc\xd76H\xc9\xfa\x97\xe7\xe6\xa7)\x10\x17+\xc6\xb5\xb7\xe6\xe4P\x04*v=\x7f,\x1fB\x96?\xf0\\sE\xa8k\xfe\xef\xd0F\xdc\xbf,\xb2\x90\xc0\x86\x86WZ.\x02\xc2\xb4\xa6\xf31\xcc\xc1\xd9\rH\x93\x1a\xa7\xf1\xe4*\x9cl\x06\xff\x91!\b\x7f\xe4\xc6\xacWX\x95h\x94:6\x90r\x93_\xef(\x8f\ni\xb4\a\xa7\x15xF\xbb\xfasFo6~\xcc\x9ej\xa1\xb2X\x8e)?\xf5\xe8\xf2)\xb6\xc4P\x1f\xbc\xf1-4\x81\xf7\xaf\x02\x83\x05\"\xe7b\xc1\x15\xab\xa2\xc7\x8ei<\xde8\xe9MH:\xe9\xce\xe4\xa7l]\x9a\f\xef\x8a\xa8\x1e\xda\xf4\x92\\}d\xffnh%\xcf8\xf3\x84\x19\xbc\xcex\x13\xaa\xc2\xa6]\x1ck\bd\b\x15%\xb7\x107ra?\x8bI\xf4\xd7\xe6\xf5\xa8\x90\xab\xc9{[\xcc\xbe\x03Mi\x13\x03\x84,\x9d\xca\xcc\x85\xb1\xbf\x8b%\xb8|\x9e1\x9b\xdb\xaf8\xc0\f\xd3\xe2}bLr,\xda\xa0!\x03\xe9\xdb@\x92\xe0D\x8f=\xd9\xc0\x00\xfd+\xac-I\xa5\x04o\xa7\x1e\xbc#$d\xfc\x04\xec\xeb\x9f\xe0\xc2S3:\xfe\x9eOFd\x99\xa03(9\x1d\x87\x97?~\x1a9\xe0\x90z\x8e\x8f~\x96\x18Q\xa6\xb3\xfd\x953~L\xfa2\xbc\xc1\xe5\x12F`\xa6\xa1\x8e\x8e\r\x9e\xb5L\b+\"\xd1\xd0\x8eb\xd9\x1c\x87+\x83=X[\x95@?\'\xf2\xde0\xf9\xf9\xc3\x98Ev=\xb5\xa6\xc5\x87\xd8%\xd6\xf0\x98\xe6*\xe1K\xc4e', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00\x10\xb9\x04\x00&K\x8d\x91\xd35\x00\x00\x00\x87<\xf5\x9b\xe7\xbf\xc8\xc6\x99\x01EtO\xcb\xf5\x8fm\v\xab\to\x1fw\"\x04\xac\x93\"\xa55C6g\x0f\xe5\xfdl >3\b\x93\x13\xbf\x11]\xe6\b\xf4\x8f\xdf\xfa\xbfW\xb3\xc4\x02\x14\xfc\x9e$\xcfS\"\x06\xee\xc1\xb8\xd6:\t\x97\x03\xa7.\xf9\xae\x06\"\a\xf7\xc6w\x8b\x81\x01\x00\x00\x00\xb0\xc0W\xb7\x10\x97\xba\xdd\x94\xfc\\\xe3\x15\x00\x10\x00\x007>\x1c\xf0\"Q\xe8n\xc9#~\x92KH\x1f!\xa6\x15\xb1/\x97\xe8\n\x0e\x11u\x89^\x03\xd4\xc0y7\xd1\xc4\xfbG\xe0b\x9e\t\x00\x00\x00\x00\x00\x00\xc6\x06\aPl\xef\x9c-U[\xd5\xe11n N\xbc\xcf\x175cbR\xc8a\xe5\xde\x9ey\xf8T\xf6\x88\xe7\vG\xf6\x8a\b$?\x90X:a\xcb\x94\x19\xdbqT\xfe,\x01\xb9N\xb0\x96\xc0\xa7\xddko\x9d/R\x87\\g;\xbb\x97\x06y\xe3m\xf2Z%*\xcc&\n\'v\x04\xbc6E\xfe\xa2\xb8k~j\xd1\x13\x1c\x03e\x90\x04\xc3Utck\x9e\x13;\x1a\x19\x97\xcb_\x92\x89.^\x81u\'Pd\xff!W\x12\xfac6*z\x82\xf1\x12#\xc2\xc6\xa5\x8a[\xf3\x96\x00\x87#\x01\xe6h\xf8\xa8$\x87)\x02\xb0\xbe\x832\x10\xdb]\xbc\x8b\x8ct\x06q\x0f\xe4c\x19/\xae%(\xcd\xee\x80K\xd5~\x02`\x11\xed\xa6\xf0\xff\xa1#\xf4\x9f\xcb\xc6\x9a\xc3\x13\xda%\xc1\b\xa4\xcb)t\xbd\xfe\xe8\xbbK^GqB(\xd8C\xf8\x1e\x9a\x06\xd0\xcd\x93\xc1$\xcb\xfe\x1ftO\x14\x9f&\n\xc5\xa47\xb5\x8f\xb8y\xcf\'9\x86\xa3\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\xce\xee\x96\xf7\xeff\xa9\xdb\xe7\xe7aCb\\\xf7TA\xd3z\xa7u\xa8\xac\x98\xa2\xe3\xe6\xc1\x82\xa3u\xfcx\xf1\x19\a@\xb2\xdd<\x04\xc7\xdb\x1e\xbb/\xee\x89E5r\xd9cy\xb8\x1cK;\xc8\x95w\xa2\xfdO\xf2\xab\x19\xd2<\f\xdeO\x1d`C\xc9\x97\x8f}\xa1\x05+\xca\xc1/\x0fl\xc0\xe9]\x03<\xb6\x00_\xff\xe0\x1f\x87|G\"\x8e\xe6\x1a\xe2\xd3\x1b\x059\"\x18\t\xeb\xaeL\x0e3\x1a\xe2Rz\xc2\xd0\xdc\xach\xceV\b\xc4h\xb2;\xa9\xc4\x14?fi\xf8\"|0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r4, r1, 0x0, 0x1ff) 08:06:58 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x355, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000000)={0x809}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10}, 0x70) r4 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001d80)=r3, 0x4) r5 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xfffffffffffffeff, 0x4400) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000000c0)=0x18, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:06:58 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) sendfile(r1, r2, 0x0, 0xeefffdef) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) msgget(0x1, 0x8) r7 = io_uring_setup(0x975, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x3d3}) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000000000080000000000a00000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB="000000001e0100"/28, @ANYRES32=r4, @ANYBLOB="000000000500"/28, @ANYRES32=r1, @ANYBLOB="00000000018000"/28, @ANYRES32=r5, @ANYBLOB="00000000d98b00"/28, @ANYRES32=r6, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000d7b400"/28, @ANYRES32=r2, @ANYBLOB="000000000100"/28, @ANYRES32=r7, @ANYBLOB="0000000000000100"/28, @ANYRES32=r8, @ANYBLOB="000000000000000000a002d700"/28]) r9 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x4) ioctl$KDGETMODE(r9, 0x4b3b, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x52, 0x0, @tid=r0}, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000300)={r14, 0x3}) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) write$binfmt_elf32(r13, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x9a7) ioctl$FICLONE(r12, 0x40049409, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{r10, r11+30000000}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) [ 532.391156][T16187] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. 08:06:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7fffffff100005070000000001000000000000011d9bd703004a1fdef55a96811b989501000000", @ANYRES32, @ANYBLOB="89d4c1a30000000034001200140001006272696467655f736c617665000000001c00050008001f000800000008000700000000000800060001000000"], 0x3}, 0x1, 0x0, 0x0, 0x880}, 0x114) [ 532.483433][T16196] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. 08:06:58 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x768b00) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x105, 0x2}) [ 532.720642][T16181] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 532.720642][T16181] program syz-executor.1 not setting count and/or reply_len properly 08:06:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc088, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYPTR, @ANYRESHEX=0x0, @ANYRES64=r1, @ANYPTR], @ANYRES16=r2, @ANYRESOCT=r3, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYPTR, @ANYPTR, @ANYRESHEX=0x0], @ANYBLOB="edc4b20631580b904477932df46faf1e06f371c20b09ae8ba21a909bca9cc1cbab6c3ce2a1bd01c0e485cbda1259e6f349b41385980d9c71f46e", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR]]], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x0, 0x1b2fe9a06188fa76) 08:06:58 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6262fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000200)=0x7e439199, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x35, &(0x7f0000000040)={@empty, @dev, 0x0}, &(0x7f0000000080)=0xc) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r4, 0x37, r5}, 0x10) [ 532.864775][T16202] IPVS: ftp: loaded support on port[0] = 21 [ 532.871841][T16209] IPVS: ftp: loaded support on port[0] = 21 08:06:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x4, 0x7158, 0x20, 0x400}, 0x8) [ 533.010181][T16214] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 533.010181][T16214] program syz-executor.1 not setting count and/or reply_len properly 08:06:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x20, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x8}]]}}}]}, 0x54}}, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000280)=""/209, &(0x7f0000000000)=0xd1) [ 533.147806][T12560] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 533.167385][T16219] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 533.176769][T16219] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 533.185548][T16219] netlink: 'syz-executor.3': attribute type 24 has an invalid length. [ 533.210199][T16219] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 533.219326][T16219] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 533.228843][T16219] netlink: 'syz-executor.3': attribute type 24 has an invalid length. 08:06:59 executing program 3: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001600)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000001700)=0xe8) getgid() ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001740)={@rand_addr="cad68b09d5b17aba46c03db491f19b3b", @rand_addr="102b418cd54150f124dce73009e9f8a6", @empty, 0x2, 0xffff, 0x6, 0x100, 0x8, 0x890000, r3}) signalfd4(r0, &(0x7f0000000080)={0x7b0}, 0x8, 0x800) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='team_slave_1\x00') 08:06:59 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000029b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 533.416848][T12560] usb 3-1: Using ep0 maxpacket: 32 08:06:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4e, &(0x7f0000000080)={0x0, 0xfffffffffffffdf4}}, 0x8000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/331], 0x2c}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924a61, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$inet(0x2, 0x3, 0x29) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x10005, 0x0) [ 533.544286][T12560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.556797][T12560] usb 3-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 533.566972][T12560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:06:59 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x1ff, 0xd, 0x4, 0x400, {0x0, 0x7530}, {0x5, 0xc, 0x80, 0x1, 0x1, 0x2, "3c4d1425"}, 0xfffffffe, 0x4, @fd=0xffffffffffffffff, 0x4}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r3, r4, 0xffffffffffffffff, r2, r0, r5, r6], 0x7) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 533.641043][T12560] usb 3-1: config 0 descriptor?? [ 533.783733][T16209] : renamed from ip_vti0 [ 533.806928][T16216] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 533.806928][T16216] program syz-executor.1 not setting count and/or reply_len properly [ 533.844676][T16209] IPVS: ftp: loaded support on port[0] = 21 [ 533.862796][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 533.869254][ C1] protocol 88fb is buggy, dev hsr_slave_1 08:07:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='g# \x00\x00\x01\x10\x00\b', 0x0, 0x80) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x1b) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$inet6(r4, &(0x7f00000002c0)=""/132, 0x84, 0x2000, &(0x7f0000000140)={0xa, 0x4e21, 0x252, @remote, 0x10001}, 0x1c) [ 534.022828][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 534.022843][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 534.023281][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 534.030043][ C0] protocol 88fb is buggy, dev hsr_slave_1 08:07:01 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='eth1\x00', 0x7) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x7, 0x100, 0x1, {0x7fffffff, 0x4, 0x0, 0x1ab}}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:01 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0xfffffffffffffed0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) read(r1, &(0x7f00000003c0)=""/207, 0x166) [ 535.513120][T16255] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 535.513120][T16255] program syz-executor.1 not setting count and/or reply_len properly [ 535.570115][T16260] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 535.570115][T16260] program syz-executor.1 not setting count and/or reply_len properly 08:07:01 executing program 2: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='eth1\x00', 0x7) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x7, 0x100, 0x1, {0x7fffffff, 0x4, 0x0, 0x1ab}}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x1ff, 0xd, 0x4, 0x400, {0x0, 0x7530}, {0x5, 0xc, 0x80, 0x1, 0x1, 0x2, "3c4d1425"}, 0xfffffffe, 0x4, @fd=0xffffffffffffffff, 0x4}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r3, r4, 0xffffffffffffffff, r2, r0, r5, r6], 0x7) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f038b0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) pipe(&(0x7f00000000c0)) 08:07:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xf00, @media='udp\x00'}}}}, 0x68}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)=0x1) syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x40000) read(r2, &(0x7f00000001c0)=""/196, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}}, 0x18}}, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x64, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x11}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0xa000881) 08:07:01 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffdcd, 0x0, 0xc}, 0x40000) 08:07:01 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40, 0x0) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x7) ftruncate(r2, 0x9) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r6, 0x5, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r7 = gettid() tkill(r7, 0x1000000000013) capset(&(0x7f00000000c0)={0x20071026, r7}, &(0x7f0000000100)={0x57, 0xdb5, 0x1, 0x4, 0x9, 0xffffffff}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 535.946218][T16271] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 535.946218][T16271] program syz-executor.1 not setting count and/or reply_len properly [ 535.965360][T12560] usbhid 3-1:0.0: can't add hid device: -71 [ 535.971933][T12560] usbhid: probe of 3-1:0.0 failed with error -71 [ 535.984123][T12560] usb 3-1: USB disconnect, device number 49 [ 536.000401][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:07:02 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x82002, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000001c0)=""/76) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:02 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x02\x00\xfb\xdf\xe6\xdb\xcf\x941~\x9eN\x03\xb2\xfa\xe7\xd3\xdb\xb5\xe2N\xd2<\x8b\xd8\xb9d\x95\x7f)\x1f\xfd#\x02l0/\xf4\xe3[5\xa0h') r1 = syz_open_procfs(0x0, &(0x7f0000001580)='clear_refs\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000b02327b95b919074a3fd890c4619b89f54a470800706e8fac4d270a730f110822dcd2db1e9afa537387a68e8ba402dd0177c3630757c757cc64a3ce51607c4fdf572ad2c75f4c827751ad4f556656f01d44a6f8357be9b1ac1ef7030d47bcd94e1823dbe5cddccc6bafb"], 0x6d) dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x84200, 0x0) ioctl$NBD_DISCONNECT(r5, 0xab08) bind(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr="8d2241d7fb2fa44f77be8bce6f283d88"}}}, 0x80) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) sendfile(r1, r0, &(0x7f0000000000), 0x0) [ 536.448204][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:07:02 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r10, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KDSKBSENT(r12, 0x4b49, &(0x7f0000000240)="4ba2b5740da023a77197e6195899f135c282a34afe04ecb1114e41a2ad7f518e3a3a90aef8e9908a85dffe4267a4c319fa9de6d381d8b18ebe23351e6ff1988519ff7110be554bc0f9b23d79949acf40d1d5183f38d5fd498f6c306b1d963ed97d67debacfd755bda214c4bbe07a55f2b44a701327502dd569a79b2e215cc9749cd40c3e8fc6dc09a76ce9bd8851f45895a0a98c6ff5a157c86d3a7b26700aeddec3dd84502d44a0e5db86c20c2f28b30cfe5e85fbdaeab5beb2bba47eddd13f8258898d0e2c510dd3f89354bd57d18ea179652f7d9dc9f09834654452b76ba69f0880514c") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x400, 0x70bd29, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0x91, 0x5, 0x61933335b21d3b67}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup3(r15, r16, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r6, 0x680, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r17}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x40) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x4, 0x2, 0x7fffffff, 0x28, 0x8, 0x6af, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup3(r18, r19, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) ioctl$KDGKBMODE(r20, 0x4b44, &(0x7f0000000340)) 08:07:02 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x21c8, &(0x7f0000000340)=ANY=[@ANYPTR64], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) ioprio_get$pid(0xa59d8261e6067093, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffff4d, 0x0, 0x176cb7964a21977}, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xda882cbfbf34f2f5, &(0x7f0000000040)=0x2, 0x4) 08:07:02 executing program 2: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0xfb) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = creat(&(0x7f0000000500)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r4, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000380)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r7, 0x541a, 0x0) fchdir(0xffffffffffffffff) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000140)=0x0) fcntl$lock(r6, 0x25, &(0x7f00000003c0)={0x0, 0x2, 0x4, 0x6, r14}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x74) sendto$inet(r21, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x0) 08:07:02 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x48000, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000140)=0x101) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000180)={0x9}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) keyctl$clear(0x7, 0x0) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) 08:07:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4980, 0x281) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 537.009160][T16317] IPVS: ftp: loaded support on port[0] = 21 08:07:03 executing program 5: r0 = socket(0x200000000010, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000001500), 0x0) connect$vsock_stream(r2, &(0x7f0000001540)={0x28, 0x0, 0x2710, @hyper}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140), 0xfffffffffffffe75) write$cgroup_type(0xffffffffffffffff, &(0x7f00000014c0)='threaded\x00', 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="b7513a1edf4f1b797cae8824fbf526117d7a96aa7c5a6ab0262f510d4850a88e4ee2eff549949870c5e825de62e8422fae212be0f6b37c7cd0d829261bdfbd6aeeaa7bcd20dc709fb24621414a28be833e737a66cd9857751d586462db780b82d1192619363ed4cd7c811b80c0628ad17e1a61e333540f7d1000871e2cf80a3286a76c9c7be29b88b940f4f24b49d9825f9b206c39a3cefcfb2f7a234dee9967ac916ebbf63b4e72bcd32e1e3d0ba7bd99b4023e7428e85477915c08752747c53372c9572c180f928086137493f37a8fe7834240b42fe62975fe7a01e3a2bbb3bcf69b8e4346aac78b7c1c28425aefe4be9544c2ccd5e99d1500750d115c3f580b3d8eaf2e83609972fe81267dbf9e4992aae1a59a1abbe22a351c8004fff482c382933c4adf4c326ca6768bd43fe50bc6975c6a86f0545bd4251380fbf9acdd26bea734860c1d04c8b2151ea2582321807d868cf1361b7eeceb02db5eaa169aaa84f1293c2cb08de3b03a4fedcd6bee725502f8dedb6ebef88063017a614e3718b23650504109edda2151b1df25ec0e31b7d355cbfdccd879d28659e702714c110b76dc7d5c7798cc982b2dd1aad3ee6f431a3a61b83eb1fec4663de2891c98dd75e38c67a339a412057ebcf3964aa2fef62a2bdd85b1e17d9df9d3189273ab180fb501739f9a4f2fb5a6ab0f0863c6d7997f824615218c4049a42206fd24dcae540de6c953970ee9aad13d81cb28d8075030e305857b92603afc6f3fb456001f1bb00be63c53f26eede082fbdc1123bb27d442ccd0af16b0a05edbc1f7a04637ce6f1f35dc7e5111c31df3309093cc610719713f468c45992f9b30a13f42db73ba9b66dc0db0972d7510fdd184bb9415402e6e84a7ddd6bc34be829f955bb9d1614a4c8c774c33a61e5ec6eabc91fc5844922c03ccbdd9c604476c909d90dbb8ad84f3313c9d7e1e9b13d081a585b0bf8b714474d5d294f030fb07a6dd2ca407955c50783585bb32194526a06d5b9bb23f5917e1772049a49a24aab4fdc8d1496b93a50d780e6b22728f451df115d247397befa5429b957eaad8f49aa86f0f57455576bd9488dd606f68e12eadbabe90b092820eb2a70fa046b24664c8915c4ad1a85cfb1518fb1973af8f62b9433d83625b643acd65c8f0e8eec325b790cd1a56b6188976973a93ccc9a135b0dc5fdb7c913cf51e7a945286d02e4f6fe99f09f0b647f5a0dfff441a5519ef4089d4865460368197efdacd49f514fdc6077e16a87d794ed0d9497d33bf92c284a022512dccd13de1d22059ba9e5abf969ab7bb0078193820d1868bdb23e9c5b4bf10583f39762a4cbb896a2077717a97402f35b1b5ad712462b5452b7fe8d511cc9ffa0a8e3b2ce6f37e3b961bbf88eea5744de98fa958eb65fb6af64b03d0a10bfa881cc05fa3d950873ea9cb77478e3d26debd15f84b1cda682eaad8aa9e6d96de537180b62efc4586a2c6ad4b6b4b459833743dfa254856ba141e02a5dcaf6b905374fc85e2adf795991247c722d6655b4d3963cf04d51d957e9794fecc887d67679ad9fc2daa03d88437efcf9f5a8c8bb3e9635b8f8d2d643e23c452fa7847f0ef3ad3bbcd70323f39408994cd4540a9ef365f4672d4895ec8aeccf0f00ee9c3a6eaeb4a49fde68aeadc0f808a62cad8f1c14d02aebc32e3e476adceeb5262fcbfd472b85fc5666ab5270bc529078f32caf4a51583dae4e8ff7b1e49f6362b5570642039544efb1fe903ad1e7e30cb9d0145571bb3781a9a9c9a5c067c19ebfeb8df15937616c42b00b262dca1607cc4a70d10f19b41586f23527a4c1dcd3ffdb24f028ace1db1cb982ab27e88cb129e74b0c2f8ecb4b8789fe8ed4db8c6e6f8d78c8b1f724692fb5438c8b7a3a480b4fbe71a0afef0191907295864b937a9ac95c82808119f6b9b3f578b2ea63b98d4adbc109791b5886448ec191e7d5a181d3b466c710d379cceaaf169281b8cd591c29897cfd1e56c4bb2e9d0ec4e1083c40b4b9b9a14d89d7a46b771f1a880dc031a5c0274c1e1387956b37d443066c1a65582fd42212950846ab5a5fc3dd4f16cec751c67583ec4ab850b41fa05b3dc15872a2b26ad73b5b232f48f1b0ffeb441feeedd6e092e987853a8956fa31f521dcacd1694fc869973543af51b9c16d1a6fe31f94eb3479c5006239c28906070d503e1833a3e56cac3909ac4f5e35dfd74ae67fd73af31d3f6f618138790546a0ca802ebeedfdf32f40ebba7753c5e3a33e16735e40ad741fdf1a03c9959af9e09d1bb46bde44f7857c2d3a09ff3f75e876aabc17425ec08994618012a9b3c1aeb462d733f94d73b2b2af5388469c2f24b92794191ba64f2b1ecac9646d7861c2806be1d797dc87b055efab1f3c3b36cd0fd6e1b9f70316d1b12dab53d7a25e8449ef359301fc5b9bcb146831c9ebdf17590b8de8dcf4f8d8fa82e08a07585c5e1a7c031e9d88a7efeeb0f9f0f3f465ccc4ce7719dfb36d17e60fee5802af9c15a2cea39276cf0b88354622920d26df844de18d0c5502f6a7eea0209e06eff13907a70e958131ab2527812e9c5301f923bc9a9f60715233fca3eaee4bb2b0fb36ed8cfa052c2ab51bcf9a43791b85bf26b51ff1d9f67f979ce8e6bc1238f275cf313f6faacfbce0241af547cddf9d5744616e1ade2fe3dbe9caa3d1fbd6d32f410d76c358f92d6b7a1c3f9968af6adda8f9b08265ff44c4fdb131742f04a4fbacad81e98b3d84c5f47eab5643aeb583b171020c91b6996e2832eb65e6a2a6c60019826772d3fdbcdad729e085b7913f99501ae8aeae5a72901a9ca640077b6db2dbbfc2aecc46c1d37801157232c4a17877a3e9002ce44d531e7bcfcee20c20a6718e781857698b11835d1f08d0106fddbb72f5efa08a46a0f37d2a75a8694144ec6db5af1eea0b4d4338fff47b4606c000697d84197d8c5375eba0cee780c351966f4d0a37acad571bececaf3b9df51b15db63daa805b24a4658f14dab10b78bd3968931a25016dce0984875e3a61cd5a240c44aef3981f09654b7c0c3e6aaa77279a1bec39c9004e376e32031b6ba7a377d4e0e5c065ccaeb9d78026df60ba839187f7053f26405e97ba8d7f4f85839c320e03a28a194a51e7264ebdea8a610cd357dead6ae2eea556cf56526188f3caac599a9d19477414c574c8a49894fe40c374ee1fc121d253f7e14fcec36a026da7fc8ee550b71d09e417582eaa48731d4597b80dcb4a4a332b99afbfa18d9307d63386f2b7e3b4c3f3eb0f6bb3e94a9bce105f7dc0c2611b55baef46187809a407a5692a407c305c033b2f74cc794213c13780b1cc16d6b147fec94c35d5d98200d792cbda4c48356fa44ef4ec7a3a7e9b96dda99a39de79078fafe648aa4f56d5092de4498f7f57d11264f55e4ef248cb0d6558c8a5eb981b4e11ac2cd0a574211ea1300f78933ffd1b295d13ced980721826a2901222c652f0693882d1cc0b82af265fffb9f5cfca58de1ca6ab7896932dbafe718d5bfaa5630448925ed078ed8139ddeb297e98e2758cc3845699cb37e2e92c74d0e8380d5cfebe5273239a48e9d4e26b11fde56b3ad2991d7e34da8c3fb06632b0fe08bf48514387e660833e0eb321a4adcd78e98a03da2b018e2b2e4e60c5cd84912761fc46897ead7f4b4a59fb4525e9c40be5babb66fdf3a6c4a131912d975eb4b06d5a5f5cbee300bc52513a4ff5a147be6d43ece90f3f3cf169825d08648c657e0760314ffaea56f2adfa91e54e0448154bafe9367a5cf8163230fb1c84fd64b2e7d0591856ca4ef8dfa34ffd308edd4952283d8ab962ea0b69f1c11cfbe4e9520dc70ee23c64803636b0c2a7fdb4b6885666cb1a43fa8e067316c94b606c88fe5451b6197e74069ca3d7dbad969196c046217042b23dd6f813096d73a7eb77b5071479a82e2cfa109f17c7aa91417ea1108d83de1f0cf6b52240ef1309ac70949ff8b9221fa11a67e88fe23a807c01e52f0e063bcee9f233da1dbc1e04935223473fdc65631fcc3b85c8eb790c4298569b2aa0df1e7ded42bf3878bd66f73dbbec34887ed0ff614dc12f17e2e4b56898c7c68909a4310146540a5f059940d573571d028d76a2471224ef7514ec184f586917cbe538458524020d7851a7af1f9ed03bf501af8301ffbb9b5b3b98b45967ee1744269298de0f2f60541b14073f24471b74725f92e4ebe3fbbc9c69441959f65cbcfb5d77e21bcc13595de0dc2dbe17054c13c49251640fa0fa13dbe0c35911b847146770bcd1aa0830a4538129b20f57ce9c1357b1f716b4397cec3b2b75d030718c7608ac6c28c6ba58bcb407d19279c505afec177965489feeccfe7c3aec7e155fcd9737ad94a38d53c7db76a748335699999e61e0b414faa748822b3499d40361bbfcea031e6ef55f4af57ba5b39ae8f2524118352c941be4ce63dca9f6bfcea6fc05daed8c71964993e3bd27e1180a10f004b53f55082c03b267b8befd5bf72e8f05cd756084b542997d3fb154b0a04a92b890cf7efe529d3b6cba05598ba1f3f55548a2314dc9f2994c65c7c24d73030a9254316169af4abd5bc6ad67330584b29b834d6e40042028cec221b928abb6e5b36990165ef9a86128f1796d013cc76fbca884940bbd7f103f93ab296ad19ddfb6689c75fa06603230ca7bda4de287fffe631be8d7d13561d58d383ddf13aef0f63ee31deb6db80d733c5d375d9309003ef28b902f94005a54fcd08ca39793d3d434da856f5024e55e9bbdc9b87608d6709674e92288a193c0383248127c328db50c8a1be61987a0c9968b32367808fe49f73a761ca724913ff77ca2afe1ed48176cc37d6eac16c695c8ed35e754d8f9e238905d11263096058a00fedac05b4e5b41533e4cfec28531d4dbdbf58fbec87ffb5008f7bbb8947927a73ae20a72f257a20ad14830aea702e52c8d4b5718350bd9a93cc06e498b92cf1eca6ac07c26f9aea73de355f13978272c38850de4fb6bd86c9d8eafa15781c6c1b46303eb4a71bc6420ef4655346aa681c26e916335bec598fcca151a68725511974fc04119e3ea4616a5743b797b2f8494f9da7125d3120bf677484d943a3253638471589b52a2022c8b426fe01ead0e89d3b8fe0390a5dee3b514a4a60e10ab1497558a608867ac29239f74ddbe350863ba9ff33a3a223550d63ed53ba89a2904f83c28f416c25d83150a74230e7ae4fab70faf857fc400660ac274f13d3c10208b81ee775bc3eda457b96eb3c23924d5023b7b57385f5fc133ab48b700d78875c4e8e200e0b527e424db8a1c71221d6709890777cd442f7c6891c3916529c745985c471dea4b2eb168c421b04351cd79c2994f81f46f0e2cf326ee6e79297cdcd8d09f9c8c3b576bf02ceb0d1287204d5656f8419313edb1e9e1e0a2993268cf36719bf68aef2701ac14d2762e1fbc459dd372dd9d3159861bc69d093b9ce9ad40afc0248f642969f01faa7686b49f549f4be11544d6360de90a53ae74c9d7785a7197b46c2c1bd8ea1646d4708aebf8f71e5488c3a35084fb58004a6af772e7776890ea791d3f21bd8e4c487706d18798013c66e7a1528c171565c820de0687924be383b95a4970b72fa7d38dfa05c99794575e0ed0ac0f2cf94c2febf582375235c93164c27a46daba4c114e8c0abeeecce72bf81a2b448b496dca14edc4cd49f7d11ee490c19e287e585859525faf9a70562a557aa840d7995b263b4450a7391de7abc347ad5b2ab5ab20435404716c97981f97dc434e27a9c06435b9c20258c8494fe39ee5", 0x1000}, {&(0x7f0000000040)="89e288c6c0b4264ea6a6cf332ce770f59f65454cea270519fa6c8c446f3cdb0c00153167d46fbb24ab2bfdfc01b81991762c3d486803588b9652d1a8f625543f3fbe55f58c450abda7567a0429e5ee047eb92982223bb93938387209baf5f936d17b79ef8c6bc2e88e63fd8514b66a0b23867acb6956f8f09d8e08e9cdddcf87f683762e68da3f914f7329983dff845bd5b6e3380e9d1f21", 0x98}, {&(0x7f0000001180)="bafad0afa0d60b64f4593dd6457003539a135185b0f6f5ac779102fb16c1fded559d414e006c7b44f8e87cdcf87d50e2e4f6cc609d6f95946a73eb3088e7b1ed431f00f9464d1e605f1a52e2b5751f0a2309e006736cacf7cbcac85a4e9878d4bfc1672ab1c531875321cc8b5f401694131a4dc8a52aef0c4f0b58106e6b91f2fde494ab91a6e3b612c6adc0559beedb9b716363ca7b793fad44ad3f5bc138665468f1e4049f89b45d95bf5a50cc2965bf5ae00735e1d9f0bec4c2b7a5b33146a205d5fac1", 0xc5}, {&(0x7f0000001280)="e6c7bf0e2b17d56acb90d6bb96400d17639dcc1b830d1ec726ef04d51482aa3b1a2009a1d906e1653ff7b6e823366a4d4da7c24bd746bba044712715cb304640cf3105bc74aab883163ff528afea4102d6dcd0a66630e92192bbd1e0d1f96dfb7efe2904387ca89f40e2b557b3c88c5a4a7f7bc8bf7b36ab2c55aefc0870fd8f9a340a7f88e6f5829a534bf945753813e3966c88abe6d9e28569e49b5385bb39018ab895417a909200034db1977bd91f4c216ac35c7d24a756b143cb20fe84426bffa6c86698c10b9b3dbc2e07b8e22806b9ffcaa7015f36", 0xd8}], 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="fd6240ad60089e2312140000000000000000000000b6933be1b5ae6e08000000001c000000000000", @ANYRES32, @ANYBLOB="e00000027f0000010000000024000000000001940aa31ad9086ce3bcac0000000000000014000000000000000000000002000000060000000000000014000000000000000008000000000000000000000000000014000000000000000000000002000000090000000000000060da93b180f22dc1bfc9295f2c938459c9630aeb3ef4ac1dc23e0b392cfa2b64318f429eb89d37542c7434ca2d6f354825dc0358743864d4f61aa1c685926c1eb13c4d373fbac224be0c173302"], 0xa8}, 0x80) 08:07:03 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x440040, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x401}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000001600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800484}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, r5, 0xc10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd62}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 08:07:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x595ee00e39) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e24, @remote}}, 0x5, 0x8001}, &(0x7f0000000280)=0x90) pkey_alloc(0x0, 0x0) io_setup(0x4a8, &(0x7f0000000040)=0x0) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) io_cancel(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, &(0x7f0000000080)="9f89fabfecc032ca52ac1b5f5f42acd204a1f920213b2b1d4a9b8965315677acdb2155ea930ad61037193c51aa5cad5e6e2c8cd2eb21063a3ec77e666f948409", 0x40, 0x3}, &(0x7f00000002c0)) 08:07:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='system.posix_acl_access\x00', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040000000000000020000000", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000a0c5a556f2f17455efe4797d4c26b6d0faf6ce40e42ad4df577ff7dc527aa83628277c2eface68944987b075dde2348e9eb132c6e4c9c876caa0e33a04f52b28cf6bbb890f0ad1d29b6f33398a74952629ccda2e4ff462953e3ef2ce3d2cfafd85a3735b1fde93c137bd41ff1ea09a1dccdfadee95288e06d1fac1c172b925427bd8dd98aee751f57bcaca518cb04025f0ee18094d6839bf5f5f46b2a8245a4f316225ca703fb17b4b7c581761c3139f023c56c6b425d42d613464"], 0x2c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) 08:07:04 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:04 executing program 3: r0 = syz_usb_connect(0x0, 0x289, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x14, 0xe6, 0x4c, 0x8, 0xd8e3, 0x3590, 0x4377, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7c, 0x0, 0x0, 0xef, 0x3, 0x1}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000)=0x94, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080)={0x0, 0x0, 0x37, "37002a4f337547469f9617175734a70100010000000000000000004082218b71a86ed24493086f5226c36283514b3f5da62a73b8939ef5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:07:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) socket$kcm(0x11, 0x8000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=0x3, 0x4) 08:07:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) read(r1, &(0x7f00000003c0)=""/200, 0xffffffffffffff42) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r4 = dup3(r2, r3, 0xc0000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400202) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000080)=""/146) 08:07:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000087c0)={0x0, 0x0, &(0x7f0000008780)={&(0x7f00000086c0)=@newlink={0x40, 0x10, 0x505, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8, 0x13, 0x2}]]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000000)) 08:07:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x67, @remote}, 0xee) listen(r0, 0xfffffffffffffffc) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x7, 0x14, [0x6, 0xfba, 0x0, 0x7, 0x800]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000240)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000002c0)={0x0, 0xad, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r5, 0x19, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffc3b0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10800}, 0x4000010) [ 538.979270][T16355] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 538.979270][T16355] program syz-executor.1 not setting count and/or reply_len properly [ 539.016643][T16359] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 539.054914][T16365] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 539.054914][T16365] program syz-executor.1 not setting count and/or reply_len properly [ 539.090233][T16359] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 539.099511][T16354] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 08:07:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000080)=""/98) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:05 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x8, &(0x7f0000000000)) [ 539.220048][T16369] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 539.258558][T16374] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; 08:07:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="83048f586e223140c812fdd9fa6d8aa5a50814ec023bac8cda051fe1c684128c70684ce3a4df2b0401fdcc740bf497efcb6d583fe7ebcfd60e93ba900ab8964171f692548ac65984d09e74dd9b987b3c65a43233be517444b1aa6d60183d37eb5cc46eccc70a71217a50df53e062b02c85b4cf4653128ee970d93c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80800, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r5, 0x6}, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @empty, 0x0, 0x0, 'wrr\x00', 0x3, 0x0, 0x48}, 0x2c) [ 539.258558][T16374] program syz-executor.1 not setting count and/or reply_len properly [ 539.316799][T12833] usb 4-1: new high-speed USB device number 47 using dummy_hcd 08:07:05 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000080)={0x7, 0x5, 0x800, 0x5, 0x6}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:05 executing program 2: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4000000000000001) 08:07:05 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfbfffffffffffffc, @local, 'ip_vti0\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r0, r7) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @local, 'ip_vti0\x00'}}, 0x1e) 08:07:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200), &(0x7f0000000240)=0xc) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000280)={{0xfe, 0x2}, 'port1\x00', 0x0, 0x10000, 0x100, 0xbe, 0x1000, 0xec, 0x0, 0x0, 0x7, 0xb77}) prctl$PR_GET_KEEPCAPS(0x7) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 539.562264][T12833] usb 4-1: Using ep0 maxpacket: 8 [ 539.682885][T12833] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 539.691240][T12833] usb 4-1: config 0 has no interface number 0 [ 539.697581][T12833] usb 4-1: New USB device found, idVendor=d8e3, idProduct=3590, bcdDevice=43.77 [ 539.706932][T12833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.770416][T12833] usb 4-1: config 0 descriptor?? [ 540.027609][T16404] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 540.027609][T16404] program syz-executor.1 not setting count and/or reply_len properly [ 540.053112][T12833] wusb-cbaf 4-1:0.124: Missing ASSOCIATE association request [ 540.060872][T12833] wusb-cbaf 4-1:0.124: This device is not WUSB-CBAF compliant and is not supported yet. [ 540.071164][T12833] wusb-cbaf: probe of 4-1:0.124 failed with error -22 [ 540.258765][T12833] usb 4-1: USB disconnect, device number 47 [ 541.042384][ T2855] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 541.282304][ T2855] usb 4-1: Using ep0 maxpacket: 8 [ 541.402532][ T2855] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 541.411016][ T2855] usb 4-1: config 0 has no interface number 0 [ 541.417468][ T2855] usb 4-1: New USB device found, idVendor=d8e3, idProduct=3590, bcdDevice=43.77 [ 541.426652][ T2855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.436802][ T2855] usb 4-1: config 0 descriptor?? [ 541.702381][ T2855] wusb-cbaf 4-1:0.124: Cannot get available association types: -71 [ 541.710463][ T2855] wusb-cbaf 4-1:0.124: This device is not WUSB-CBAF compliant and is not supported yet. [ 541.720866][ T2855] wusb-cbaf: probe of 4-1:0.124 failed with error -71 [ 541.730197][ T2855] usb 4-1: USB disconnect, device number 48 08:07:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1e, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000f7ffffffbfa700a5b9879c06305da170472ce4a0ae705600000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000800704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a0000009500000000000000648e49c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316d94f0de8163f6242fa7323f1740637c48468766af540439fce410944631ac262dcae08c3d1a1fbe96dd87235b441200000000000002c0eaacdafd84c000f119e31975e551558055dc2dc9477c184ca7e37b9a9694a2b9b51b85c647b1c0351c882ab56af776d737a7518b6303b9c788bff1aa3793834719ebb50463f77a379b5e7"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000081) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000080)=0x1) 08:07:08 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:08 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':\x00'}, 0x141) 08:07:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_buf(r3, 0x107, 0x1d, &(0x7f0000000540)="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", 0x1000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @window={0x3, 0x4, 0x8}, @sack_perm, @timestamp, @sack_perm, @timestamp, @mss={0x2, 0x3}], 0x7) read(r0, &(0x7f00000001c0)=""/196, 0xc4) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000000c0)) 08:07:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe4, 0xd7, 0x6d, 0x40, 0x61d, 0xc020, 0xcddd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x49, 0x96, 0xfd}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0xac, &(0x7f0000001a80)={0x0, 0x0, 0x3, "49ede7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0xac, &(0x7f0000000bc0)={0x0, 0x0, 0x3, "307f7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) 08:07:08 executing program 3: socketpair$unix(0x1, 0xe682a33dd34a02c0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10a000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = dup(r0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x20a040, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000001c0)={0x0, 0x4, 0x80, 0x0, 0x17}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x30041, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) dup(r5) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f00000003c0)=""/252) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a01a5e087c2e1205531c000001ffffff0009050a004000ea628157b35b0939ffdd404e764943d266b356f7f0e35ad063fdb45a414a28dd8ab3453fb912caba18c0b0"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 542.108549][T16422] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 542.108549][T16422] program syz-executor.1 not setting count and/or reply_len properly 08:07:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xff32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000500)={0x0, 0x7f}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000580)={r11, 0x5c, &(0x7f00000006c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x20000, @remote, 0xfffffffe}]}, &(0x7f0000000740)=0x10) statx(r7, &(0x7f0000000280)='./file0\x00', 0x0, 0x4, &(0x7f00000003c0)) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800c1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x8) r12 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x121803) ioctl$KVM_GET_SUPPORTED_CPUID(r12, 0xc008ae05, &(0x7f00000005c0)=""/221) socket$nl_crypto(0x10, 0x3, 0x15) readv(r0, &(0x7f000085dff0)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1) r13 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r13, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) getsockopt$inet_buf(r13, 0x0, 0x23, &(0x7f00000000c0)=""/117, &(0x7f0000000040)=0x75) 08:07:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000a40)=[{&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000940)=""/214, 0xd6}], 0x9, &(0x7f0000000440)=""/59, 0x3b}, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 542.254778][T16433] sg_write: data in/out 167162/65282 bytes for SCSI command 0xff-- guessing data in; [ 542.254778][T16433] program syz-executor.5 not setting count and/or reply_len properly 08:07:08 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201001c080000082505a8a440000000000109021b00010701010066e50906896c54de0501020000000000ddb6e7ec0808736ce7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x3) 08:07:08 executing program 0: r0 = gettid() r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x260c32a3fb81ddef, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r3, 0x1000000) syncfs(r3) sendfile(r2, r3, 0x0, 0xeefffdef) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) pwritev(r4, &(0x7f0000001840)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000080)="25c6adb08e9fce3c281c1f3dc7fc169e5f990822231e045e49e927fb1b7c75291732384ae07f499a50627473b407c556e51e6c613778643a85e5d212bb47f5ded10ad887836278284f6ead3dc08ae73459fb253ae593773c863b7e7b1b587a6701c795a2737ed7daff4b16abb356cc2b6dbed7ecea98bedabd367ca0eeda2dd8d1ff802a048e9629da8b9952bccec31f20393950fba663aa5b9dc9562b38fc3f53", 0xa1}, {&(0x7f0000000200)="03d935a6f9c972f0bd6664dca57bb2f3d4a6e40f9ac6cb94481eb909f9c3af66ccd6f653240747c88ef75e35cb7548b105c6f057b42ee78fb88f63533c0d64ccd2218f63fea706165de28577e4929c402fbd07945d06b1fa0a946a45b1b6d516fd1963616468036330741c01b1dec64f232981dea40068c5d4aadfa9b0dc914d5cad2e3d85bdf5597b5bf2076252d5470f769268b7351a8f848c01448f3f50b72c50a0747a858ba1fbe4cb5122607e2d335ed37a98685ffdcd1fef8546d10a774ea3f171e264918d3f373fdf", 0xcc}, {&(0x7f0000001440)="ce21dbfb8d821a47920f98fe65a7f5f7eb90a8a311830139117d10bd039c42b48e72c80780a572d1694a3e64ad57c629d6b23e55908b35a6313d13938f46c91e13f5466eb01684577f64fa1e4ddcf2efe50c66dc23734a2e40c1358a2f294046eaa741d22d1d11f35cf7948160df099f047a0d7663b8ac6b9c4e5a4e0a7c06e7f55b130c519e0d99ed0b21871026382c57d962062822667cd40414a59880052f9cffdbd490bad51410d6160c1b1146ec4aee68dbf2f13ce8da5638be4c7776dffe1f6c09c62ea7c4", 0xc8}, {&(0x7f0000001540)="5189f3e088cae2fe5dbddd404744fc3b70e4b838a8387e4ea01ff4c2d432575485f017cf110dcd029bfb97b8a526f9e4be4e1e4ef32d9653013b5a0a60ad0ab4615611dc45a84e6a764beff78dfc99d5eee48413562e63f4e229f75513f55972ee8f0d75c937f0ebf057ef53af91f43172bda87c010e6a297adbcb09b0c18ab87b9556db6c9292cd216efc2c2f0bd631258c0cb4ded97ecb409a59efea1d1aef0e5b2eaa6b4a783d6bacb9b664af2bbbb4a19a18599aaadeb8d101810297d44b9aa21e3bd2ebce91ba051a10fe56536ffe2d8bd92b00fdbe71a0eeedfbc5f3bd1e9e5b306cfc", 0xe6}, {&(0x7f0000000140)="f898019da308354cd8915af7f110dec08f21d8cca06aba8bfb5adc42b21fafcf076e34bd212ba75d361c8f20b788", 0x2e}, {&(0x7f0000001640)="c48f3b52d86680219b8d4ea551e1b00488f82605a7745537cfde1f34364ee13ffc007e79d1d88d6f2bb09b50dac59087f85064db08fcbcc3a9e724541fe1d32d800a8611889b197e23d5ca837f04685dae83f70fd925c410f08ca2fc96c46589bf4e507db1e3b6b88eb2f350b25b9a5d405d97eff9c9971f901faa8d6e8e5aa38843bf3fa3d497cc8104a06e8221ddc39c9301672dd8f2aa9de338dd1380be111f8a20aeed8f680c67c3ef0bd9ff6e4407a7b340aa68dae16b3d", 0xba}, {&(0x7f0000000180)="3c42d08a7290635172bcdb1f7bbf3867d9e1e5ea1d2ebdfa7dec48dfa11a133d45234b0a8b5e953789952ce1305e72ff8741", 0x32}, {&(0x7f0000001700)="741bfbb8c5080141d19ec52b006d150721c843b2b8846e49e7fa198e12b52141633f677dfe0127ca2a4d8125726ada9c09fd1bb390677dbb280d9d1141d27ce5dad4b1902504e50bafbbbce48bbe2ebc9886c25a86afa431b107527d9fb06ec84f824df97fd1b6cb0d49d21f245d2083b54e635f15dce0019a70ff31bffc4164754a617031d50782df89a3b3", 0x8c}, {&(0x7f00000017c0)="a00aa1a45a20a9fcd6c8f9f8e4da4a9b1640581591b81be0d8320463654ad419af885ada1b68ff20671a28c804d7ad64cf1c15df604d108869d2593554db3a4db7693df826fd31bdd7cfe29553aa3efdba7e669476fec98ffe553d04a7733bd5d43a48ac08d91b", 0x67}], 0xa, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 542.354453][ T2855] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 542.435560][T12833] usb 4-1: new high-speed USB device number 49 using dummy_hcd 08:07:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'syz_tun\x00', 0x29}) 08:07:08 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) r3 = gettid() tkill(r3, 0x1000000000013) process_vm_readv(r3, &(0x7f0000000200)=[{&(0x7f0000000000)=""/164, 0xa4}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x6, &(0x7f0000003740)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/251, 0xfb}, {&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000003540)=""/15, 0xf}, {&(0x7f0000003580)=""/31, 0x1f}, {&(0x7f00000035c0)=""/165, 0xa5}, {&(0x7f0000003680)=""/2, 0x2}, {&(0x7f00000036c0)=""/101, 0x65}], 0x8, 0x0) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff000000ffffff7f00000000fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c1b9d607000000b6cd483be3f0d3253730e711f5969f62c28b22256a238e4b4e162cc46cc4f79fd2b316da4f0de8163f6242fa7323f1edf6057db186507cf540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x8001) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000000c0)={r3, 0x1}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 542.692346][T12833] usb 4-1: Using ep0 maxpacket: 8 [ 542.713023][ T12] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 542.723014][ T2855] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 542.732473][ T2855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.743163][ T2855] usb 3-1: config 0 descriptor?? [ 542.745768][T12833] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 542.786795][ T2855] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected 08:07:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x1ed34ecf9148d017, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000540)=0x14) r2 = socket$kcm(0x11, 0x8000000002, 0x300) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r4}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00'}}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r3, 0xf3, 0xa7}, &(0x7f0000000080)=ANY=[@ANYBLOB='enc=raw hash=streebog256-generic\x00'/73], &(0x7f0000000440)="0a29d814619669665e7dc76c7cf976c6bf833dd96398522876ef7d442744d80621bb169f0d00c75bacff7068ad6196262c96c56ff88e094a0ff42d0464ee816e3e0b2368038e115334211fb57618a5abaddbef7c9a32408610ed28f219ff2f5ee8779e07503e9910ab0bde6470d1cd9615ea0819f4fbec0cbff7b22b954e71574894ef0514932d7775570af5861a84e3848f702163a7ab340c992bef0bcada4407944ed67b90f4f1769a0f63bbc3a172633dfd99c6b791c1181f8a4a2443afb4e0ce29f868b0647b08f06457814dafc503981819765d7cf4a22cd0335e8f093ce6907278dc7b7b111b4f7f5ed48240386ab897", &(0x7f00000001c0)=""/167) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 542.894770][T12833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 542.902769][T12833] usb 4-1: can't read configurations, error -61 08:07:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x80000, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000300)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000002c0)=@urb_type_interrupt={0x1, {0x9, 0x1}, 0x8, 0x84, &(0x7f00000000c0)="c282a0acdf2821bdda601130c4189d9a3b89e87d38c5e35b272648976eea82b38bd31df0c588d106d0b5ce3faca01b867adb53bd83de7ed1c3402ac41fc3441cd629ca1f797a0107abc89b907d381fec3b99bd4616c91c757c86fa385f0a61d4b6a97854d1918e8f3d44d497212f7a0cc048215a2b99ce49daddcbab4571257cb1a731511d914a5e1c4ceb21c4c6aaef7e6798e53aa9fc94db24922b", 0x9c, 0x8, 0x5, 0x0, 0x8, 0x8001, &(0x7f0000000180)="e54864e157c568130ca82854ae3ca2926ecb82e4d8df2aef77e992ade776"}) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 542.952343][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 543.015477][T16465] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 543.015477][T16465] program syz-executor.1 not setting count and/or reply_len properly 08:07:09 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 543.072767][ T12] usb 6-1: unable to get BOS descriptor or descriptor too short [ 543.092365][T12833] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 543.132409][ T12] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 543.140296][ T12] usb 6-1: can't read configurations, error -71 [ 543.332545][T12833] usb 4-1: Using ep0 maxpacket: 8 [ 543.372593][T12833] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 543.492820][T12833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 543.501360][T12833] usb 4-1: can't read configurations, error -61 [ 543.508374][T12833] usb usb4-port1: attempt power cycle [ 543.822528][ T12] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 544.062239][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 544.085189][ T2855] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 544.182486][ T12] usb 6-1: unable to get BOS descriptor or descriptor too short [ 544.242584][ T12] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 544.251240][ T12] usb 6-1: can't read configurations, error -71 [ 544.259947][ T12] usb usb6-port1: attempt power cycle [ 544.262325][T12833] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 544.287265][ T50] usb 3-1: USB disconnect, device number 50 [ 544.297267][ T50] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 544.308952][ T50] ssu100 3-1:0.0: device disconnected [ 544.512357][T12833] usb 4-1: Using ep0 maxpacket: 8 [ 544.552963][T12833] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 544.682533][T12833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 544.690517][T12833] usb 4-1: can't read configurations, error -61 [ 544.852341][T12833] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 545.062694][ T50] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 545.092324][T12833] usb 4-1: Using ep0 maxpacket: 8 [ 545.132691][T12833] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 545.232522][T12833] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 545.240819][T12833] usb 4-1: can't read configurations, error -71 [ 545.248267][T12833] usb usb4-port1: unable to enumerate USB device [ 545.432498][ T50] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 545.432580][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.451623][ T50] usb 3-1: config 0 descriptor?? [ 545.495958][ T50] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected 08:07:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x40381, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000300)={0x5084}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) r2 = socket$kcm(0x10, 0x2, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x4, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000140)={0x0, {0x77359400}, 0x16d, 0x8}) splice(r0, &(0x7f0000000080), r2, &(0x7f00000000c0), 0x8, 0x1) 08:07:11 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x0, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:11 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:11 executing program 3: r0 = gettid() r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x260c32a3fb81ddef, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r3, 0x1000000) syncfs(r3) sendfile(r2, r3, 0x0, 0xeefffdef) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) pwritev(r4, &(0x7f0000001840)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000080)="25c6adb08e9fce3c281c1f3dc7fc169e5f990822231e045e49e927fb1b7c75291732384ae07f499a50627473b407c556e51e6c613778643a85e5d212bb47f5ded10ad887836278284f6ead3dc08ae73459fb253ae593773c863b7e7b1b587a6701c795a2737ed7daff4b16abb356cc2b6dbed7ecea98bedabd367ca0eeda2dd8d1ff802a048e9629da8b9952bccec31f20393950fba663aa5b9dc9562b38fc3f53", 0xa1}, {&(0x7f0000000200)="03d935a6f9c972f0bd6664dca57bb2f3d4a6e40f9ac6cb94481eb909f9c3af66ccd6f653240747c88ef75e35cb7548b105c6f057b42ee78fb88f63533c0d64ccd2218f63fea706165de28577e4929c402fbd07945d06b1fa0a946a45b1b6d516fd1963616468036330741c01b1dec64f232981dea40068c5d4aadfa9b0dc914d5cad2e3d85bdf5597b5bf2076252d5470f769268b7351a8f848c01448f3f50b72c50a0747a858ba1fbe4cb5122607e2d335ed37a98685ffdcd1fef8546d10a774ea3f171e264918d3f373fdf", 0xcc}, {&(0x7f0000001440)="ce21dbfb8d821a47920f98fe65a7f5f7eb90a8a311830139117d10bd039c42b48e72c80780a572d1694a3e64ad57c629d6b23e55908b35a6313d13938f46c91e13f5466eb01684577f64fa1e4ddcf2efe50c66dc23734a2e40c1358a2f294046eaa741d22d1d11f35cf7948160df099f047a0d7663b8ac6b9c4e5a4e0a7c06e7f55b130c519e0d99ed0b21871026382c57d962062822667cd40414a59880052f9cffdbd490bad51410d6160c1b1146ec4aee68dbf2f13ce8da5638be4c7776dffe1f6c09c62ea7c4", 0xc8}, {&(0x7f0000001540)="5189f3e088cae2fe5dbddd404744fc3b70e4b838a8387e4ea01ff4c2d432575485f017cf110dcd029bfb97b8a526f9e4be4e1e4ef32d9653013b5a0a60ad0ab4615611dc45a84e6a764beff78dfc99d5eee48413562e63f4e229f75513f55972ee8f0d75c937f0ebf057ef53af91f43172bda87c010e6a297adbcb09b0c18ab87b9556db6c9292cd216efc2c2f0bd631258c0cb4ded97ecb409a59efea1d1aef0e5b2eaa6b4a783d6bacb9b664af2bbbb4a19a18599aaadeb8d101810297d44b9aa21e3bd2ebce91ba051a10fe56536ffe2d8bd92b00fdbe71a0eeedfbc5f3bd1e9e5b306cfc", 0xe6}, {&(0x7f0000000140)="f898019da308354cd8915af7f110dec08f21d8cca06aba8bfb5adc42b21fafcf076e34bd212ba75d361c8f20b788", 0x2e}, {&(0x7f0000001640)="c48f3b52d86680219b8d4ea551e1b00488f82605a7745537cfde1f34364ee13ffc007e79d1d88d6f2bb09b50dac59087f85064db08fcbcc3a9e724541fe1d32d800a8611889b197e23d5ca837f04685dae83f70fd925c410f08ca2fc96c46589bf4e507db1e3b6b88eb2f350b25b9a5d405d97eff9c9971f901faa8d6e8e5aa38843bf3fa3d497cc8104a06e8221ddc39c9301672dd8f2aa9de338dd1380be111f8a20aeed8f680c67c3ef0bd9ff6e4407a7b340aa68dae16b3d", 0xba}, {&(0x7f0000000180)="3c42d08a7290635172bcdb1f7bbf3867d9e1e5ea1d2ebdfa7dec48dfa11a133d45234b0a8b5e953789952ce1305e72ff8741", 0x32}, {&(0x7f0000001700)="741bfbb8c5080141d19ec52b006d150721c843b2b8846e49e7fa198e12b52141633f677dfe0127ca2a4d8125726ada9c09fd1bb390677dbb280d9d1141d27ce5dad4b1902504e50bafbbbce48bbe2ebc9886c25a86afa431b107527d9fb06ec84f824df97fd1b6cb0d49d21f245d2083b54e635f15dce0019a70ff31bffc4164754a617031d50782df89a3b3", 0x8c}, {&(0x7f00000017c0)="a00aa1a45a20a9fcd6c8f9f8e4da4a9b1640581591b81be0d8320463654ad419af885ada1b68ff20671a28c804d7ad64cf1c15df604d108869d2593554db3a4db7693df826fd31bdd7cfe29553aa3efdba7e669476fec98ffe553d04a7733bd5d43a48ac08d91b", 0x67}], 0xa, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:11 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendmmsg(r3, &(0x7f0000002080)=[{{&(0x7f00000000c0)=@isdn={0x22, 0x2, 0x7, 0xc1, 0xcd}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="202334cc1a851cdeef5135c90d6e2c5aafbe91732b8ec056a9c6acafb6e5316e4f8921c5de676f50b27b221e52444e92ea0fde0d9605270eee020e021ea549eaf9b468afba9dc3501d5ef6976d68f1ea2401eb6ce9eaaccd94d5aa2a064427d34cb09038cda14ee59e05", 0x6a}, {&(0x7f0000000280)="6a18d96323537815fc9048d3da0b1828a290a9952dc3d551fc092bbbc8c5901e493d2664bb4d78ecd22175621b21a1920ac73af53bfbcabc0a3b1af7789b6e129c5984d9e1218142628d1ed3de3ca2554fc99600039186a63b901047c4c1cdb5", 0x60}, {&(0x7f0000000440)="b6c446e99dc9184708b11cc63dda396403c6c234c1eb4406493eea6ffb6bccfda7d31a7b646672c83e6d3fc85d5de1dea36c789180f1a70b0bbcb281851d78eff4303eaf644533942202f90ed0d0fb08dfff5b96191eefc4ad258c2fbe13d27d881013f0557b68fd48e418bb5c3dae104b9bfa1a69f2d7", 0x77}, {&(0x7f0000000140)="990b2b8fcef1b18f0155e04d7bfce3a08e64cd078de884a138aaa0c6aadafbe1b0087c703f86061fd5fa13634233a32c1165f6e8deeccc9cf2a585941171d3", 0x3f}], 0x4}}, {{&(0x7f00000004c0)=@l2={0x1f, 0xf6, {0xf7, 0x7, 0x6, 0x1a, 0x81, 0x80}, 0x2e4, 0xde}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000540)="80d68999adb01cf9", 0x8}, {&(0x7f0000000580)="bec73c6e80f5987cb6e4d194cb5af81fe4caceec04b71d09eb22fdb9328a6e31bd377ba1806a8a49f4556714168b3a09c6b3e6af31f1b51a37ce408e9113cd7073758fd936a1afbb2cb33e3458387a1cfe8ccd2bbc8295e8b4e6a5c0fc8a32096f68db04b96b4cfff6a2b64c4ffb20de5a9b8c87649ea67057459b4931", 0x7d}, {&(0x7f0000000600)="a86a10f7e7c34fe1e96a8ca143f9ee14e55b1cdafd2c6a4e186a9bd2fa613ca715146438611c54a1a79067edadde8f1028e5b46283b4f4afc54b63aa447ac9fcaaa988aaaca2ff73e2bb0f4e966e", 0x4e}, {&(0x7f0000000680)="519431faa81f5c4fcc3b1938bfbef570cfdcbafb44b9e62b3af30b4bf4f84e341e51e6798ec53372", 0x28}, {&(0x7f00000006c0)="7c888c0347ae7328835053b194b2d553aca3827c4193193978acb0604246031bd2f1bfb36c5cb6a10e7a19392b8cb407816c80aa2d87f485dd9b6202e46268046e9b651c2b48f6483d4fc49357da238f572813d102fa1cca6946e9737cfa697341d0ef3f63e7299643038a46057b2380fa608df9cca42ac649bfb48aea669d22194ca3f3f8d5fff2f92ddc13b01fa3f92b0f2496c73aeb029ff3cf0b946befa91a32ee1f5394bf610d924f6c47263a6cce02403c02ac2d822825ca792ed74f7bc02b679f23183b2fcb80fcd9c781a7a15955c664", 0xd4}, {&(0x7f00000007c0)="7a827e973f0dede79f1c871fcf257d31e1acf6", 0x13}, {&(0x7f0000000800)="b39943a721445f2e1b6fa364d53f9a9734b7644ad2fb18242e32b429ad31f244d7ba08b2685428f6ec330739f5240ca23dfe599a1b632356d5ca713b7605e52ff38ed7b5c67621a63cab2dc61ffb2927f2b1d5b32010652d72b29cac0b251fc14ec6182d4e8f9a7a573bfec813d95d4008f61c7ba6a6d2983f699cc001c39f584e8e35ce3af0d30932d42e4d610d76680234550b68924a304745aa31d309a8e0517bb4ad54566aa7df8431e3af4714e1f0ae350cf980980b571321a44eaffbbfd39f48e2954fedab20bf7be4a27b0352ece637f6000cb0a4deb1e7ee7424c11be5239f76e009c23ab09f", 0xea}, {&(0x7f0000000900)="f1531e63cad82183a46fcf07bdfb3ed25f81aa9a8f2a980b9c042b41582f0e1745a42b868693a4e4c859749354d1bfb977e72bfe226442dae223fed890b5691e5cf73da881ff827c64ffd27e97e0a9396906c7b18b95c7da3f8c74ea07c4195bd254b26a0cc69774bce7f083f6a6717f05", 0x71}], 0x8, &(0x7f0000000a00)=[{0x50, 0x10f, 0x480, "97e2e12243a0b951d748ee7fbf4f1cc46e0f165ba3c0fd22e766b178e149716205e65b6a60268dee5c30bfd4e2a8669b38031c0ab6c28b13bfd224cd234594"}, {0xb8, 0x2, 0x10001, "429fee057f055d20ca829227227d688dc22bf52946e119d1d4b2d4d5b6037f6fe8807e766de19884f9d854cfa5faa6a2ff0e27b9073dec1ad402973aa299cdab85a173c25cf5e846196baaba095cee0eddf4ec9a44aa5d872aef99eba365c15d848cca66f25496e520cb06a2167cf68a32a5be7a79e28faa79053b39085b3665f72478e449da5449e05bc4e6f9195e417976f4ae51a81ce6a9640aa6cbb3bba51cbd084caeb3e8"}, {0x30, 0x110, 0x8, "9c5b1a7f48cfc4c59374b63382d85c64836e9de9d5abf5e247c4"}, {0xd0, 0x191, 0xff, "3022b4584e5691f8743320279daf9499dbec9a02a490c22bb4f1bed6d3f1403184c0792e6ab3973cd2618237dfadebd8ee9cf0d45a0483a7e422fbac04f262c1fbc4e27e2b2d1b7a845e151b09a5dde4a90304658de55183b3cc78492acf2a209a79d6cdaf4bdf60a36db59142847ce11c6b854815bf679121f768ee69de25c3bddcadab9e099dc78ce3263fac74d510596787083c61d779b19de955a295c5a9b78904f11b4b4e8ae219f0c3996cb4b6dadad6cd27b9168743bd6b5df8"}, {0x1010, 0x105, 0x4, "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"}], 0x1218}}, {{&(0x7f0000001c40)=@caif=@util={0x25, "ba2e74dace31aa8377a49240cd7cb558"}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001cc0)="10caa452b5dcdf2fd72bc5f4dad7c554589a4b037921dd7279eb5a", 0x1b}, {&(0x7f0000001d00)="492cf4cdff5067ff0c00269445641003c8ec408bd1ba7b3c936a501a96246f344310e881b8f9fefc31fffbfd26e695741f8705f3a0ec07eb15c473f17e6e00de7a3bd8252a8fb677e8b870f72736f5b0b7889f1f6f1790779a7c29b990", 0x5d}, {&(0x7f0000001d80)="0079c1525160545815f9bcd00d5f78b1ef425f0082af6dbf98f79b731e7dac36cca37ffbbeb231d0ff4fe6978d", 0x2d}, {&(0x7f0000001dc0)="0fefd3b10113ab4568aea971ac94a83c214227ef29834ad6b2245e436e5a7749fe495b3478159f66b4dd2de2c5d46d149e7639b9755f6ccc80272b6a079acc860de3b90a64f879ac69224e0f9cd258b751f41cdb3049541584c706056b755bf5dbe496f0375c5b671e157596bf8506c7a6d9e6acd8e53fd56c04e26bfc0cdbb92ccf7697ba7e3003e7a4a40ccc8fa847b2773987fdc2784a6357003d90825ba5e88d4264d4b923e76cc7dc6ec48de162d156c70b801b7267a18d6d3c67ae60376c48cbca1ca8b0f792ea8d076ddcb9417b0f1e4a4d2a923b5b7891488b26d44ad75331", 0xe3}, {&(0x7f0000001ec0)="b2f36ed15b2d6f0a8f2c2e942aca1dfeebb49f954d2248339f9100b64a", 0x1d}, {&(0x7f0000001f00)="6543d40b1cf17187e05a25caeeb6bad4900c43638eff24ba00935180db890d1207c2b64fca9217ea4b1d09e0f83bf09119506dc566e9753e343469e6b9233025845304a7039d62d967915d1294a307dab07a4bbda00b3102d2f3967d02cba5f2101417bd10113a3a78dcdb2962c76b926c561dfbc799c31ef701ca9deb14cff894a1b0099df6c73ab9421f105c6312b6175fe0719c0dc6fa048316e422bcfea154b917df0d59b24a12a3c0f857e6b78a96031743f3a2629f65a6b72af1120ef93c50d91b79c841600ca9646115cb1a83a7bdf8b87fd26c7de0812ebb9bf005c966", 0xe1}], 0x6}}], 0x3, 0xc2f3bf6caa030ff3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x4}) tkill(r0, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) accept$unix(r5, &(0x7f0000002140)=@abs, &(0x7f00000021c0)=0x6e) [ 545.823164][ T50] ssu100: probe of 3-1:0.0 failed with error -71 [ 545.888952][ T50] usb 3-1: USB disconnect, device number 51 [ 545.911055][T16488] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 545.911055][T16488] program syz-executor.1 not setting count and/or reply_len properly [ 545.950069][T16488] QAT: Invalid ioctl 08:07:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000004340)=ANY=[@ANYBLOB="b0fcffff10002f0500"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 08:07:12 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x200, 0x20081) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r5, 0x3f, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r6, 0x10000}, &(0x7f0000000200)=0x8) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:12 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1e) 08:07:12 executing program 3: unshare(0x24020400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x159b, 0x0, &(0x7f0000000080), 0x8) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r4}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00'}}) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r5) keyctl$unlink(0x9, r3, r5) 08:07:12 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 546.679809][T16499] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 546.679809][T16499] program syz-executor.1 not setting count and/or reply_len properly [ 546.735146][T16533] QAT: Invalid ioctl 08:07:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r7}}, 0x38) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) eventfd(0x401) 08:07:12 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x90000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x2) r1 = syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000091bdf7403c4195817db30000000109022400010000000009047b00020206000009050502000000000009058b1e1800000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003900)={0xac, &(0x7f00000033c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$packet_int(r6, 0x107, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x20000, 0x0) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) timer_settime(r8, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) timer_getoverrun(r8) ioctl$NBD_DO_IT(r7, 0xab03) r9 = syz_open_procfs(r3, &(0x7f00000001c0)='oom_adj\x00') sendfile(r2, r9, 0x0, 0x7f85) 08:07:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 08:07:12 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) socket$kcm(0x10, 0x2, 0x4) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/261], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000002c0)={[], 0x6, 0x7, 0x20, 0x0, 0x8b9, 0x1000, 0xa356c94d29cd0f70, [], 0x40}) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 546.924613][T16539] device bridge3 entered promiscuous mode [ 546.951962][T16546] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 546.951962][T16546] program syz-executor.1 not setting count and/or reply_len properly 08:07:13 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYPTR64, @ANYPTR64, @ANYRESHEX=r1], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:13 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000002c0)={0x0, 0xad, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r4, 0x19, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84228}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x1c8, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x18, @remote, 0x7ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @loopback, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @empty, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x17}, 0x1}}}}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5c}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8002}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x12) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) r4 = getpgid(r3) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r6 = fcntl$getown(r5, 0x9) tgkill(r4, r6, 0x19) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = gettid() ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0x92b7, 0x101, 0x3, 0x5}, 'syz0\x00', 0x46}) tkill(r7, 0x1000000000016) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000240)={{0x3, 0x3, 0x7, 0x8de, 'syz1\x00', 0x5}, 0x4, 0x828, 0xffffffff, r7, 0x3, 0xd56, 'syz1\x00', &(0x7f0000000200)=['syzkaller\x00', 'syz0\x00', '.wlan1#.vboxnet1{\x00'], 0x21, [], [0x8, 0x5, 0x82]}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 547.172526][ T12] usb 3-1: new high-speed USB device number 52 using dummy_hcd 08:07:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 547.248136][T16561] sg_write: data in/out 808464396/6 bytes for SCSI command 0x30-- guessing data in; [ 547.248136][T16561] program syz-executor.1 not setting count and/or reply_len properly [ 547.273732][T16562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.354694][T16569] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 08:07:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 547.532607][ T12] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 547.541191][ T12] usb 3-1: config 0 has no interface number 0 [ 547.547990][ T12] usb 3-1: config 0 interface 123 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 547.558066][ T12] usb 3-1: config 0 interface 123 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 24 [ 547.568359][ T12] usb 3-1: New USB device found, idVendor=413c, idProduct=8195, bcdDevice=b3.7d [ 547.577850][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.592978][ T12] usb 3-1: config 0 descriptor?? 08:07:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 547.635343][ T12] qmi_wwan: probe of 3-1:0.123 failed with error -22 08:07:13 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) r3 = socket(0x8, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x12, 0x100, 0x9, 0x2, 0xe, r7, 0x8, [], 0x0, r2, 0x0, 0x5}, 0x3c) connect(r2, &(0x7f00000001c0)=@hci={0x1f, r6, 0x3}, 0x80) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$sock_ifreq(r9, 0x891f, &(0x7f0000000040)={'team_slave_0\x00', @ifru_addrs=@isdn={0x22, 0x8, 0x8, 0x7f, 0x81}}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) [ 548.045747][T16566] sg_write: data in/out 808464396/6 bytes for SCSI command 0x30-- guessing data in; [ 548.045747][T16566] program syz-executor.1 not setting count and/or reply_len properly 08:07:15 executing program 2: r0 = socket(0x10, 0x803, 0x40) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x108}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x4) 08:07:15 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) getpeername$inet(r4, &(0x7f0000000600)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0xffffffffffffffac) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r9, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000640)={r8, 0x80000, r11}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r12, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) sendto$packet(r1, &(0x7f0000000240)="39727b901cb92395d9e107db6c11698440dee2c7951ec0dc08367ef3b08c525100f2f65add433207f1649de7451310a9c84b5ddd9346cb2ad001f70700b9f6c4ad0cccc9baabe51d70004add4f7b0091dc3466cf5c1c0191be2acea7e95338f4f46561f8c295b453fee7721444f4d2b5fbf7b3becc4f267c4808e3303a3cd4722103ed3417ea0237493a107c33a4623a19f42762e4339cf584a2f23e9dd0203d5c8d10e0e31a7cae40f7881f08e973643a35", 0xb2, 0x4000000, &(0x7f0000000300)={0x11, 0x10, r15, 0x1, 0x6, 0x6, @local}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000005c0)=0xffffff6c) r18 = dup3(r16, r17, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) inotify_add_watch(r18, &(0x7f0000000580)='./file0\x00', 0x20000006) socket$kcm(0x29, 0x7, 0x0) r19 = syz_open_dev$cec(&(0x7f0000001940)='/dev/cec#\x00', 0x0, 0x2) bind$packet(r19, &(0x7f0000001980)={0x11, 0xf5, 0x0, 0x1, 0x1f, 0x6, @broadcast}, 0x14) tkill(r0, 0x1000000000013) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@sack_perm], 0x1) 08:07:15 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r3 = dup2(r1, r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0xd6a, 0x97, 0x3, 0xb5d4]}) r4 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 549.905291][ T12] usb 3-1: USB disconnect, device number 52 08:07:16 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:16 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000280), 0x20008844) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x403000, 0xe) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000040)={0x0, 0x4}) r4 = perf_event_open$cgroup(&(0x7f0000000080)={0x1fe2ddea837210bb, 0x70, 0x7f, 0x20, 0x5, 0x4, 0x0, 0x5, 0x40051, 0x5fcae1084742ac3f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x8, @perf_config_ext={0x9, 0x562e}, 0x20, 0x5e, 0x1, 0x3, 0x64e, 0x400, 0x101}, r2, 0xb, r2, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x9) 08:07:16 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:16 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = gettid() tkill(r2, 0x1000000000013) tkill(r2, 0x19) r3 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r3, 0x1000000) sendfile(r1, r3, 0x0, 0xeefffdef) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000180)=[r4, r5]) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:16 executing program 5: r0 = socket$kcm(0x11, 0x0, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:16 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffe80, 0x0, 0x8, 0x0, 0xfdf5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xb800) 08:07:16 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) listen(r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x20000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x599de3ee3eb4adfb) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[]}}, 0x20000000) 08:07:16 executing program 5: r0 = socket$kcm(0x11, 0x0, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:16 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbf, 0x82, 0xd4, 0x10, 0x46d, 0x89d, 0xb8b4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xca, 0x9d, 0x4b, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) socket$inet(0x2, 0x80000, 0x7) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003880)={0xac, &(0x7f0000003600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:07:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000100005861500000000000070a10000589e12c2bdd10000", @ANYRES32=r2, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x41100, 0x0, [], r2, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffde9, 0x10, &(0x7f0000000000), 0xfffffffffffffdba}, 0x70) r4 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001d80)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:16 executing program 5: r0 = socket$kcm(0x11, 0x0, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:16 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4e801, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40027d) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000001c0)) 08:07:16 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) recvfrom$packet(r4, &(0x7f0000000440)=""/232, 0xe8, 0x10000, &(0x7f0000000540)={0x11, 0x17, r5, 0x1, 0x97, 0x6, @dev={[], 0x16}}, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 550.883958][T16648] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 550.883958][T16648] program syz-executor.1 not setting count and/or reply_len properly [ 550.912661][ T12] usb 3-1: new high-speed USB device number 53 using dummy_hcd 08:07:17 executing program 5: socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 551.153822][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 551.272784][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=089d, bcdDevice=b8.b4 [ 551.282353][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.292374][ T12] usb 3-1: config 0 descriptor?? [ 551.338133][ T12] gspca_main: gspca_zc3xx-2.14.0 probing 046d:089d [ 552.002508][ T12] gspca_zc3xx: reg_w_i err -71 [ 552.007701][ T12] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 552.017407][ T12] usb 3-1: USB disconnect, device number 53 [ 552.752326][ T12] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 552.992192][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 553.112604][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=089d, bcdDevice=b8.b4 [ 553.121784][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.131583][ T12] usb 3-1: config 0 descriptor?? [ 553.177341][ T12] gspca_main: gspca_zc3xx-2.14.0 probing 046d:089d 08:07:19 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) tkill(r0, 0x18) 08:07:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r4 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f00000001c0)=""/132) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x800) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newsa={0xf0, 0x1a, 0x801, 0x0, 0x0, {{@in=@empty, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x4e21}, {@in=@empty, 0x4d3, 0x6c}, @in6=@dev={0xfe, 0x80, [], 0x14}, {}, {}, {}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x28}}, 0xff03}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 08:07:19 executing program 5: socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:19 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3e) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8040012) 08:07:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x800) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="1f0be9ccefcb44f82fd70cb7b1c954580f78e94aa52d2f01d78ea965c2b29f59230ffcf0adb555cc8a3e5ef8be488e58b1708d17c0b4cc4377fee43294d2cc4bdafed0426be274c93c4ea00d88723bc0100d0fa3fb5f7bc71c96cbf9f577f770874af4e8fb4b016c14ef9247da68b8e96849a02f652666fab5d2ba14917424d64004836aa6e3e0033824614b8827f82c8a8ecd3b185b4af25b0a62e6ec2119d937b4587c022a3d5b2b99c31216aba0d23a7a7d9cb0d06c803deeee04ffc5ff06499f54b0cfacc48a9855b3e3b83a0630ccf19ac7d5a17c6076243316822844926da645b3c681737dddcc8f937af679f3eaa21aa5af2a1c6b0d66182cf443cccc2b8d1a2fc4e0f365f2527951f22deefee0036076d3633fceb223173cd7e5c84ae176316aae0e39b2c764ca8bbf703ab62a87b2b9fba99ddebe2e251eb664946e874208258815bf8a7d3c3002e646d6aaacb425b8b4664c3ec4f82b84fcb2c8ed7e18c79e05f4d2b6542f7328aea21b3199549cf468341c80884ce7c6cf349f72060cc9190d08b3c7921f6d066dfe8b2e3b1d72dafc6003fff70267e3a8beed390f3cef0bd2e1bad08b45f8ddc496feb8222fec775ae69dedbf6502015227044caefb7967ddf4bbc586419f92acc80d02021928ad164ac26ad37d999ded5f79281b99cc5a12d18be31ee702095640f657caebe1da21f35355dbff080222527b01a7cdf071e7b4764eb474c154d43b65d50b7a0437a1c180f36cb676e208dc56423287cb38572d901c3bdb4d91eb2e6743495eecf79346cb8a6e514a0478d052b8b7fede5b8eb5bf92de06cf02726562762da614c342e5fedd2f49312b3a1434f5b695811483f95e7c15d0afdd4e510bd76668626dcc34f6aa45fe9435da4efb3e4195444aaabd01a6bfe644a60f5e8c51e3942389cdd94c2bc6775201d93949662d0b60ddbc712a404d970ff056e47efe471edfeb6a4ea8d766573fee54bc0686031718e7c25b52b2dd51addd6a0b106c964e2adf8d44ee709740553107d19f4e068583ce91f74efa8e34c821c5e58c03b6e8d4e5b55cc3e6ed80cdee2b6f192d0b2368e4055e4f7fef9e111faec225b57c256aa0425335b43ca379c01ad341af745f2ad4e3664c19481f9a2e1c0f0d2233cd4fa1dad38d06406ff2d0b92fc0d5ea8e12b37807c3a957fee5c5fbf1c43d5bd2a38e85ab20ccf8f733c4463f318d0448d5d8a4364bf130a89b2358291315f9160c5478c3c7109f2d0d87c3179cec4e98d2107c05e6bd0e0f8953a5140426c6f34f40f3479cbfd5e404fa0aa4cd1493ebb9ac9f8d64ca67f6793847afe4f61b52c4144308afee38791c0ca31ed1fd160ebde4e03d04fc06d97fed906fee9fdaa00c801cdedbdaffc4187c11097e17785f6838e8410b81900547c32f93ffda6c785f802f95f645fcf51871dfb31f9b3fa5f3a6c6702d4e2ce65d928529283c5df79ac2caa24c0ee5f1a06446b20fd3b0f58c4795fe19bbf5db36258927d543c89d0c411ea5d01f96e1bd878e953728bc0027627265b7abee42794810b0878bc0cb6833a7cc5c9fa85f00081776f36b0b4b438b42fcf9d541b94c0700ac153c08097f779a2429b7a8a78ba4ffaf6b459cc54f638208df03ececbef8b52a5be54a3a8f66574790540f59140224f8cdbc24a54edef5b2da7ac6a5e7775f6d1bfabaa8affc929e6b93149921b44c7ca59a8b9c67480da185c5bfe7576b5eaef63865797c8a19d6e849fa9b0f5a3b8bae2f351feab63e1d859ac1436b28db9d5b61ab9ce93612346cd1f9e20621fd79f92de6cc551bf159d544dd0ce66e565eb266ba1f915ef56f4893a66bd4b24e8caf2c5476df5d1e1d55296092ce0a70561fa622dbd51a8b846fb1fc4a0d3df62976dcc94c6b9e386ca05f545f02826d1b99ed1090e6dcbf364ba52bbb31a5b82ade93ae29af6d92f74c4b3dba7fafca3d2c6f9175ec86de77b03678ba7a66db425b899b32dd62dde63d72d742d6a8b30dd19f12ec662a370f0f1f73debc772875ff45745dee076d1af0e753f51e0ff3e835298ec833d489157ed272fa6a2db691fa1f428f815332dd8f9b3cafbd7add60919fb198f1df0bd5b224f2cc6f1a83fa9a44d0378af88fff94f75984efb56f40b27522855fddfedadd5a7fc53e75cca8b1ef4d654989c476fed4c8731b4ed1e16f1480aae19924a1480dbefa18898d285bc9757803719cf96c4e6d255964223c2c8acc60f7fb3bf9f854ee790fdf14ee6d97058a13bd5c9705ffb6440d3cd0f603e25428cc9a332fb29c556cd1e2358cb7d8930437ad4dec85788b894eb6cee0673b8b49ec7a10de05313dde1ec561da10dc651ebd8184f833a512aee0048eb1852326a874fc08ae05d45394ca643dea358e9f394ed88feebafd62ed26cd28b001c011dd9096d3cab9994754fd3686e6544074d25376d183ebc08cbe016ad9cccd0229c2061b785c953742c754bd2949a52e6401fb73e8ebd89e11b0c52444dfe0e57f5f9ee1402054a3506d8613ad3dfcd71b7163548fd855a300663d9ee2e7a26c97fd61db272f09136dea2768ca777bfbb1e7f3ef3ba96707f5156677378360c042f1021c48854366ea7c8095f0d06c62a9b7173518c194b99859a1eb7d70501934efc126f2c869ffe2bd650ab5ca23eaaeaa43bef4087390a93bdb2841e7f372f724632c1c95802be3603b9d437e0cbbb26aa70a97660766c40be98f1c808033b83a384806f4a92ff01fecd62d048d4e709247ac69a80d593456173880d7d7451e86160d0edb94e6b99392dff70643b0e9c14b238d1f15f753c603c873b256e5b6615831ee81b9637a0625ddac345569350625e402b6ce6c7a196f07cafbe8b81aca2b3282f80b4c7cce28ed9a442454426d670cfb3107a7986e7d7afbe3668a9f4e46ed6a0eabc79d6a94f42fdd07e5fc185094b9b6ca45c32a6504c85b162d93a2c7fec4edce59d46530ea71d2c731f8ccea921cdc7c9cebd932efd5a3468ee70894150ff61c137fd6cf6e932f5f9e7e7d78859cf19c3172fe0b36ec24dfa394904368603c16328ac1c468509cb069eafb96ff2688e4ed503dc55dda6f08d91ca966e3048fbbf5e0d4ebfe7e891886beccf894e00bf35f73fe5bbccc31e6e1773d2d7adb1b4563c606394cc537af6b49563364fa9353206f084a61bf5f42cefad63b5b01935153d5718b64a2848fbb0373e3dd292127cb125a0bb38e32587c12a9032e93088b2201457eadf1ff8988f169a3ba213df66d39a39b509d9c043632d3033ad6b5ca4efb96a504614f23db5df2c5177055ce37869fd46ec0fde030a80334c9f14eee0d0d17e78e4e6e8a7a2e8e15b0e99d8bdf0a998974c952b7469197ad2ab27180cc0a72ecdf2dd27a61004a5c24ee64991c7abc74b255369bf79bdf599fb4a504091c9966d6ad6720908b887f7f11c7440c47f138fcebb15df25bed18de8469efce6ad1d2b62e46d1b19133df7fa49849534f82bf696ecfa24d757ff2ea5d490ad61cd9091087f01b958bbbfb22824fabee9ea22e7a34b8a9a790ad824ff97abe3780aba68edfcc1af439a1e0d3c209f9155ebf01a7e523b748f53cbbe9d1d35118eafe3138b81b81c90f59566cd6a162bf79187dfe84c944a80e0877b296b524af01cb829356e14ceef77df6915aecac1d15ff5e18b6b735da3cb524b39929b9493eab7c81a316671637cde73780bfba69267c1eb28a3626a54559c198a8f4e908ad328724b9eea7fab4f8a3a95bba19193b87ece8c2935d19b04637c732992c37870eb1a48f5c1b980fec7412567febc734819e2e32c495b3335286446cdf20187177dbaaceb3e256bf458034ba0106daa89cc1a85974d5b9ba2549ee75c0acc92a1ef05298cd6d21caee048edcf97b7dd4280ff5356794b026cf235b5e998136b0630b7f17e42294a326ada9d8de680f74450880fee8a6379ea084e5637dffdaea4abd7f31fda97514edd19bf4c532c41746bbfe699ffcf8063dd332871c0428c6b264423534348efe426c7146e9d594b74c2c42f399af46c533d9f824ab3f828fa163009c4672384d1f934dd4c1f5cba44a5f0ab3fb9279bf3afc7a3f0be2bcaea42a0fb114bf180ee914e2d59e6222ac498324c0be24d9cdb833795e260915afe08b4e38e66eba0c755da71d01d1b2d75c7c71a1708dc49b44b66560458cf8de1c10ec9cbc3fc342480270e1f8bf2bb2faeca4fc86f973ed6d7033a63acd114d947cee7bd4d6d603174a37530fdd27869ed0468934c40801248db834e00397163bfebd5d56f81f38a64e3422a3a5c928e95ff63074d77d81bb043213c7add3e147fc36c7d09a376a7d1f287dacd14e5ca9b32b4ed44b1ff406d82ee5ff9c4f9d205742ee843588b3025f5681330ba3cbf42c98fbdfdcc53b819166ec0520553f5eda0c0f0d8de9e7a5069b011ec19e4190494924538e68740908652125dadfc9d582182534c4a2d316a7d31ca2cb5bd42ca3afd9f6bdcd20859baa97fa4e63ee2fddda060dad1b56c4498d660b431e140df942066dc1aa703029f7d1d64a105e53dd1f870886c492827c36251baeb375fdce9b22c361841c03e1ab65cb016d5e391fa692a480ad6c9116ccedc05309983a7d3f81d8ee861c3bde7dd180476435374360a3a5ccd4f57537e4381fa83718b4693082f2092b72bfeabb1443bc164104932eaa13cb96c202f0be3319a2556fa2f055ab9d89545db36c95e92a75fb6d4cfc4cf8bcf6160df995b427607d7177ad168caa83355b57d75ebef0036abb06d673437d1d7380ebe82a6a445414959b47ded8f4b5452b896c8a691901f8abe8ff107a47cdc9a35645a5fd2b53eaf12584d3ecb7222dcbdfa7482fef20cb910d396fd8e40e85bb0f8cf7e1936d8e06b01a72d073b553724f2fbc6d38a58ed3bf780e958978a50ec9047efeb8c6a1ee5abe5e901b1a8246ff8efdbc4107d75d58a00d7fafe1db706d31e6b749c8edadb6e15edf64b77d4e659f0a75f2f6d503e92488b626ef93fafc7ae3fb7ea3331ec0b2a8e4d030696719abdb9729c518875329a006edc1b64c74752fccb3d46e6e112ea890b4a387b904333597f9002befe9ec906b2a81738d6ca7ebc0a5c651fb9a3d928581bdc5f73a9bb1c9952af893ac766b73e3a2a26d01a60c816195cc93a466cda4b8559bf53bef1b3d32f127f5dd977ea6a88eedafa9a8940816eb4f54549c2a5e4f92edbda92e738afdc7a388117dc7c270ecaae0cd3efec962fac396863ad26bb7c0d3c03da1f3e3e6b4c2cd648b2681de019e3b1855cbbe8cf943d06308c132e918e11a18d2699f2492a66ac3ddd684c5e0bc555ca661195e0c63ac89fb4fe6756caffbf509db7eb1972cdbdd94bb64ed11d3d312af2c70813614ea10e2678f23e79a042a2571b5d2c9b391729dd230ec57f4fbea95e100b3d8788e8421c4c3c94e45d25055209597b441cca831d43b343551f34a1bff23574d0ac32a672c1144180790c84b25bd40ec2b8733dd9e352a4e91ba6d7180e9e93e62114816a7ed66edcd152cec6120c41eac0e97389577b783eb5ef72cae4e57d4479798cded2a4432e34a63153e7e338be6bca151e8231a45a8fbb63fe39beb7a391b36270a7145a54802b72bfdeecdcdb6ca6cf97d50882b40bea9670c3838fb4a5e1543641b37232d27a8a2bee5bf84a52ccf73830800b2bb375fbdcf94f20e83ccef97c98da6f2ab9cfca4d5513a299d71e6f8d433f4fb28bf88edea6feb3f9edcf64f642f1a40832203ce1c65160f09d4621f78f008c9f664", 0x1000}, {&(0x7f00000000c0)="2a7b73b70e4fd02eed4a6f9ef38ae85123088b35d12e92a174a5a4beb304360c6a5d85", 0x23}], 0x3, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x110b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x3c, 0x200, [{0x0, 0x11, "3b7ddbf2c00b6d28b3f18f9d2ff8dc"}, {0xf37633891f7ea2b2, 0xe, "78ed7b779f3a76288d9e09d2"}, {0x5, 0x3, "7f"}, {0x2, 0x10, "d35f522c3095cfb938953b19265c"}, {0x2, 0x4, 'wS'}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0xd0}, 0x1) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 553.435969][T16674] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 553.435969][T16674] program syz-executor.1 not setting count and/or reply_len properly 08:07:19 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101ee4b0009040000000206000005240646000005240000000d240f0140000000000000000009058202100000000009050302000000000023567ff661b6f9f6f4e0d4aa8d409162dc262d814415c619dd5ee67834344c1cf08db42147c48fb1991f3545109c8f0083691f2308c19b0d838b110a0d7cc19644f7c90d6e31e0fdc72154cd6dbcae4981fc380f2b12ebec33f6b59918cf4c20166205af0471b01e70effa8e881a5ee40065e68cf0af4052e3bfd1e861930e39f452cb9bbae3afcb8fb1b8140baadaa4c703f35cf8496ba8"], 0x0) 08:07:19 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0x4}) 08:07:19 executing program 5: socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:19 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$kcm(0x11, 0x8000000002, 0x300) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:19 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x7f) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000000)={0x24, "98fdc70b3606d0ab733bbab7264e615d6c603c6a452c67481e15889d296b4e3d", 0x1, 0x1}) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) socket$inet_smc(0x2b, 0x1, 0x0) [ 553.673392][ T12] gspca_zc3xx: reg_w_i err -71 [ 553.678513][ T12] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 553.741383][ T12] usb 3-1: USB disconnect, device number 54 08:07:19 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x8) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000080)) tkill(r0, 0x1000000000013) socket$bt_rfcomm(0x1f, 0x3, 0x3) 08:07:19 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x10000, 0x206}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) shutdown(r3, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000100)=r5) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:07:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="57060000", @ANYRES16=r6, @ANYBLOB="000428bd7000fbdbdf2503000000"], 0x14}}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000200000000180012000800010076746900b972020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r9 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000001d80)=r8, 0x4) r10 = socket$kcm(0x10, 0x2, 0x4) sched_getparam(0x0, &(0x7f0000000080)) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:07:20 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 554.161273][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 554.202710][ T12] usb 3-1: new high-speed USB device number 55 using dummy_hcd 08:07:20 executing program 1: r0 = creat(&(0x7f0000000080)='\x00', 0xd) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x400) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000040)=0x1) clock_nanosleep(0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)) read(r1, &(0x7f00000001c0)=""/196, 0xc4) 08:07:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff44, &(0x7f0000000040)={&(0x7f0000000240)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x6b9bf15277f007e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000002c0)={0x0, 0xad, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r3, 0x19, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x840001c0}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80011}, 0x4080) [ 554.259340][T16725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 554.349187][T16730] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 554.389267][T16730] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 554.442380][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 554.562824][ T12] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.732528][ T12] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.741800][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.750412][ T12] usb 3-1: Product: syz [ 554.754756][ T12] usb 3-1: Manufacturer: syz [ 554.759594][ T12] usb 3-1: SerialNumber: syz [ 555.044230][ T12] usb 3-1: bad CDC descriptors [ 555.059026][ T12] usb 3-1: USB disconnect, device number 55 [ 555.772256][ T50] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 556.012291][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 556.142566][ T50] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.322589][ T50] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.331855][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.340076][ T50] usb 3-1: Product: syz [ 556.344520][ T50] usb 3-1: Manufacturer: syz [ 556.349230][ T50] usb 3-1: SerialNumber: syz [ 556.644173][ T50] usb 3-1: bad CDC descriptors [ 556.653523][ T50] usb 3-1: USB disconnect, device number 56 08:07:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x18002, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='2', 0x1, 0x0, 0x0, 0x0) 08:07:22 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x5b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000000000000006000000000001090224000100000000090400000003000000092100000001220000090581038000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002206"], 0x0}, 0x0) 08:07:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020800f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6ebdc6b7a7fe28f6730e711f5b69f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323ffff4637c48468346af540439fce41f144631ac262dcbe08c3d1a1fbe96dd87235b44174f7c0343185089a01000000975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) socket$kcm(0x11, 0x8000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004340)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000004080)=0xfffffffffffffedb) r5 = socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_int(r8, 0x1, 0x26, &(0x7f00000040c0), &(0x7f0000004100)=0x4) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x38}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000004500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004540)=0x14) r11 = syz_open_dev$sndpcmp(&(0x7f0000002ec0)='/dev/snd/pcmC#D#p\x00', 0x800, 0x408401) ioctl$KVM_ASSIGN_PCI_DEVICE(r11, 0x8040ae69, &(0x7f0000004040)={0x8, 0x81, 0x80, 0x2, 0x400}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r12, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) getsockopt$inet_mreqn(r12, 0x0, 0x7, &(0x7f0000005b80)={@local, @empty, 0x0}, &(0x7f0000005bc0)=0xc) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000004180)=0x2, &(0x7f00000041c0)=0x4) sendmmsg$inet(r0, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d094d79efec47a985b2f1caf7cd601385e1a44f5afad0ad5706410167ff935194414456fbfd36db819e4a8a2fdddab08ba0a61cf5501", 0x36}, {&(0x7f0000000080)="9c60fe926b156659f704ba38f9163a9e06543edeb1c49ffe2b949dfb49a9b0c6df6b6577d652d480", 0x28}, {&(0x7f00000000c0)="737c049c8a63a211f5cd9f3edaf6216fffc8b26887627afa6282a519a87bcad1a9bc92e98950f1a431afa5b00777f1e30d803107175ab4ed7fecc7", 0x3b}, {&(0x7f0000000440)="23f71cbfe0e7e762f12861d0e0a0d6a979617bfb3d57b26ad2f9e9246cef39b9b64f32e319d964210b32793fe73663accdd4c4b195af8506b6a20a7cf22ede3656a4a4ed3c6d7020676dd7b6a443220750cbf012cf22fc8f2d0853cea77de0e8a54df9b3284ea4c56d3fc459beeaa00d68685288d74b662e3c5118fa1d3f7da31240ce5fb5f0754ccf3fa89331d5cc8024c28a0ef6c3713eef69474665039cbc56f8f03590767cff49be016ea820f8fdd01977cde88c1d196e890a2b345d2a0dfe650b6e9b260f13ff8f384b374840ae33b01a3f2446059389a415368d597bbb9c14da17d51c461a3791777e7e6495304c1fc880a54f66993316cae7bbfd1b422b4548baae49f0ff7c3ed98e6e1a4a6ae6a5e262fae3ab5443389319d7522fb04739223b388663eb779f8e3dd84b5633bcef6ff5cb279915eb7cd1ba994cbcab32b1b6f03a98369ca870664afad409744909c9c941440da50c1ec268ac69f3ad3af6078432e0c992b9eadf2f21b92ebfcfc0a36b9e527d355457a665dd0669f1d5d8b67338c567709e6b7daf1835ae5465ae4f607a885d2d1d3d3311a089cce41a8f0bef749b084c55ac675d88e7fd77c647f3e804e83f4999d10f94a478b5cf9ccfdef26644bb3ac8eb5f0c6392786e03ae1215440b8a20297e896e657c5c861df28388f83e2aad358781c03e4763dc8bf2168716feb9a618cafc8ce5d85b99ea8419deba4355bad811c88e87b929b0e0278ff16b74285c64f4142c62ee86fba65922e6ff85464e6539063258b248511f4701d4a3bfe9dee5da21335681c7210565ac01de55788bb91d2c776aa0c4ad8e3f32e8f752f2eb89275d2dcbbc332d6b65c9a9b128a7ffcd6eeea30982126d0eb6f144dbe44a9c8ba20f4b1e5b72e50f01a3bc4403738867ce978e9b40b336c5998a4c22bdcb1e12a9e770def66c05f90a9b8bceeba9c59bf5f3d854c3901db00aa2db12712b3555a87a0eda68d0a3c5c0fb1b36a9aeac885e2bce7e45861d38ef58b53ecc72f88be0e57d4be1368aaed10dc805b9585a60d211bb4331fc8149a7007a4c697c1a177ccde7c3db04bad57c27a7fd92fd02641a38a4adddd52cb36252026bd85cc443e23cfcecb1c72715eb962a187b8728ec9d3f4c74a39cbaabc198462d0418d0f27b6f938bd36ee466f95ed7f1e9da206f5c59a097ecb11341cee6515044efaba28305e77486e3f0f3d7fae031e7526f2963b5cb48162719d34dc8c48d5d7cea386188c6f538325aa631f12aca3fd0c23b19e0e797758f2fd47ef76fe4de185e04398830db58ece5e87c8ac5e55959748f79f4e144e76ab50ec2d4ddd0dc91b5e35d5e9f414870ca13b88fd4bbdc03e41f34d79cc709289f63692b9a6eb4de03042fc409d5e8365bf6ef62907aa63d11630890fdb2fa369c38fe32885063e6759794e3b244101617115497751554b6d1c77ed956cec153ca02c8642c903cdc97d474aedc1c62ad72fb9255b846271225afa2efa08f6420cad62801da36a39bb1a6750ba5c8d12ab9ad2f49908457b14d58743caedbefb0f9d67c8174d5aa8ff2ea6be93e78f3859b975aaca095a6ffc8bc6a128ca19e36c31782c965555a44b7633d8f18bacf11ce73f534c74ad3abe2243e93e0793d8a52a1a80694eab31db59c5c4d37685e969495817fd6c45c6ad17c31b0f3d09f057a241a648217d744e39beca6bf9d7815d61bd86b860577dc5f24d200672154b57f8005fc6ab906788f862f7ff5f83aee37a10725709de13c46d19bbd604a881ffcf5803b854d46c44fba4a786ef41eff2fa6d48a0173f928816b8a6c3875d52dc721b32fa9e640890b79418cb3bf9e64188bfde49bd63ee864f5ff422d21a380e66153479485b9209e0694203a81c6efcf9ce4f007948efdfc83b8304fd6c4537360aea995fa0172c8ca265b0089dfa98575fe247e07d2adf40d2310961c4e1f39feea5c1878f26a42abf967ff3d68c54cafaeade1e0dd823054a38904bc568abd8f0b3b61cb62a49e5e93d21fb4e722f04c007ff87dc4d48d12f6fce5231972d7627bd2d01ab3080c558119257ab490f9511efa966a6a466e4651b7efd5c592e824e39cf9e3826214c0ac98f69f54ae5cb1722fc6aa89c8b3a96616166a8869c3b698760a4fb53f417f5acb98b8366e07787f4520dea6ba53c8ae2bbd565fd40ef17bb15add05af0bdfc92aae81e6a0417fb187ea85ea25a93f51de53bce83ec881b697524fb542ed94ba08171558fe76d5c4e3c23ac2ca83a79692d235b76227cdcf6c416a7b049590676a755feddc64c7f824bfeab0d23947a47d2ac1ddaaab4eda2bb4bae46a8168bcff2df8c9c01bcb54a2a33f8b171ae59a99f6645e339c74b188e3847c8e28a5604852d6e61037edd99bc0b97db0fd139a42ad0e65e1f96dcd7455a20db7bff8fb3575d8a9b509310f1c68771a7cc576680dbac3b078a87b1a8450f0ae21aaacd66a71bee79405dd58abe6cc8f648653538d12342aa65004b706197ac83e6510f79d7e75001cff44356e3a67b987bc72304e9c38beb19322dd025df8238a563f6f6ec9356b35f0e65d01b6d1b964d3dde0304c02366521467b1c40f0fd7aabd8bf47d78eab20e0cfa72735338bfb1488511a53a03555f4f711493108fe1285ce200586f134e708fc57d0e03b93fd6f1ffc9fe04a8db5fe17f7a10b0073bb4c7bd3583cc926f635a9327502f3a3496081abe921d079af216f13e8275c5f2a1dae05d41bbd532dcf8065b81d72817812e1d6af1f16295971e6976f96c12b467b236e9acc8db7ea56f8914b7c285002c4e2099151c3f8e2b4f48e27945be25c27bedd674b2389fd285628fb642d73de764d36da26c848a5231019ba7649712dc21a267342f9561af25084af84dd4f55515b0ddcc198e7d87e7a170689ee6fc5dd3d8b56c850c8b702b21d736cc73f92d1a7f75e448fc85459d48256e53934ce247f76d6d0a0b19317937642c6cab9b02412eed5b15ff76ed67945b176eb73cd7b6e53ead2890e3cce733d3227d7c352da34fadd5ce5c643d983adb2ade6eb9fdc394aaa20c6eace35af9fe226f6251cfb9e5927152508ee78ec4085c5b73591dd1a8ac3ff7acef085e653d522ea27e3d1b441d80ad21f7bfa9eeda62398771609794b4c0f0cf28d21690a56594694648d1fa0995ca9386339302345066092d26a80e2368a1b8313ae089632672072fc42c157d4cbaa562671d9df0c80e0bc9c83d69588b00cd98092fcacd973f3fa6e405d5cd481a7da5087bfc5d95291940e4e4c9082b56a4df1098e967f7da46b343b464b461979c970321d366d641ae9e93ea711691d2c23cd32b27f6923749dbb22780d880afa460197ce998fbd8e091ec11bb06d4bb27cf7b30ce780192f722f3fabbcf023903aa25fab769a2a4b6219924aa3c413c81bb62937856484674abe7dbc6996ad572c0b15b1cbe0d32470d0f5bae531b5c045e8be1f1375b951b349192f34dd6334cfc3e8962f84de21fcadb2f1b9c7c93fba2877526fcee1b695e73605192c979cc2f1a5180a1556cc02e1df6078dd62839f6d0c6ba62539aaa9f253166a030604cba583c1f1be8ec74a90aa479672911fd726a6d692fc7e0159ce7d5a86b49fda654a66296b429b9e397591aff8286139923148190a4202a39359f057dde245ae4d02e598b62bda5f0092f219ae9669a376f1c75b199a9ad7f85f367482383265d147de4b6cf5b295a260d548eb4f82611439521b7e1d6d0ce35a7acef87106328afb71ca12716f88f4506dcb018441eb483d547c1fe2626add33c18aa9e753db1c748bac8e6b9db8366e3ef3933a365eea439f8bf391aa8cd595e3e3909790ad2f1c6104d189602d1e2eb76d19076772719d3725c8575ca273d7e1accf16ad908293ac24041cb4cd55722080b03af3826af7a044fa310b7ce9fe7f39888d026a7217594df16cdd6e3b870cded9697dd5f4508bd69713a8b5ab1c44ec20a045b19ad2c5947db594f5186247c9a696c1926786b47080c4893002c695324954d1999ccb626c5f11a39475fed9d28d68fdc9c1fb0a7cca1d4c4d5b42534aed7940c0c9e7caa667997b56737c36ccfd32440be563438b25dfe9ac03e3be321c6cf65db19cf818f5d1af011a32a60b50addb54249489084a9015dabd3096b8111bfd0a5c7a5a8ae983fc4b531bdad3f3c61377a94e270a16b2df3b7358e74b7c9e347d608212381bb120b3ab96b09351db490da4e2284985eab8d35d5eda745d3c98a114d049adc0f3a2bebb06218570e2dec846accb31888884ff8bd32e8a165e92208d80a86b24cd557c4ddeb8646a3e4d475330376cc2aabd90b854b641bb3d9e4d98dce7bb5a7635a5635d0efeb3e9df00d9112434635f6c2adc4f6861f53e3283830c9fbf86d7918c11e2270d0facd87107a937089198bb4c87c91444d6936cc96f44bcfb3a59e596de068ae9bc7f9918e770be5ca2e69bd425f1d7bd809c0daa554b8dafcec17d23229592b65a7ea6888ffab5035af774435b0b8984ee965b2856092d3f3425f0166db049444f7bbe73fb23d67425845af4aa8a905c0b252be4be889a9300c847829b49a1d29afeff49b6b39d915688bd040d2664a804570ed40816ac3bbbf573ad24ca29dcf89e28e0de694c688f225d7ff17d90ca6cc4befa3dd259599c2641bb6dcac6c2c44dbd7c632c0b9cfdce5a2a1130c248fcfbec7d63b43509f623d8dbbe70c1cf4823b010eacf01af12b718a97c4409dd14617a629385362951182cc29cfccf199be8c09d7a235099f092537b8a911bb09a11174a8861f628746e06f7d493a7eead54696119fb1b530fe30f90b323f2aa89023033eaac043c1237dbb3366dba7d53422e743109bc0d7458f180eab7c7db0b2c174353f1661414fd8be94134de17edec5f1d246185f85d80724c59c0fa37be903b885bc6ca3e0ea0dbce71e1568d8f4f3011480113bf72e9754b65597bbd3f915cb1e5aecb9362058ad836b431b456e0ab3269911ff6cbd1d030deba823bf8f6a8855b39f336eb8b6eb19bcc508390803b684964dc6f0b7c61b51455164360f8ca1eff7665264d1d8205c1c2c313244608915f8cfdbaf4aef7353a99e41e0ce1c4c5e0347cc2a3b475d4af9eca7ac0f329c10e5eb7bfb2d617b895cb86e6772d084e1d238f7567460fa05943f686eee8596a7bbfcdb9d332ffbf4b8ad5632b4ca1013d00b675ca458972edc122a694690209450fe0679b7f62b8039eceafbc85c5b181d0c843e405e5036311c4d788e39d1fec8afaf8add04a12b25678b4ab59b5cf62e05dc05142175153e4aab7b757a822f81a226d24a97500bf489ed7299cfa865dd5b1e280f00d97e0f810d63be519ebab9bb2268ad648e5e4c0391f4bb209013c96d1531bbce73de128ffd2b6b76aa3a932ae19bb4680193b2c295ba9bc65f9f0e3f7dd3852fffdfeb527b042604281d19c07bbae0b22902b256bc86b331a11a80cc7b8af675c1bff6376ddbd35c1a32e2d9c0be4013467513f69363e7fee679368b853e5f39185825c8d4a3434aa6c7a28bf8c44c17121d11c8cf282da65bc1eb0c8c4ddab0ebd2f0d5a1e86db5c8cd13fb0c82ce2ee05b7f79f37070ecb968f7b383280c841feb4d3b869987c2340d5d26ab9d6378170947ec15fe89f2e2680e3b36f66b3c71ea65a44260914baceca7d346da460d2ca74468f33b9e78b93cffc5635a4005dac6d7ac6f11958112b901ae2253a7271f74fa8d41b0353286ddd11b0c62316c08a19c2d7260babd02d63c28e", 0x1000}, {&(0x7f00000001c0)="0841fddb5fbe62f23fc6697370bcb99614f1fa92b9b8abdacdadfb04a26ac6ae9d6457797366429e1127309d306ac138e358455ddac1a8166683a2c70393897f983ad6829e6ed465ba1cdd2264889752b2d034a1c3f9b77ae737cb6fd7c3d047a8a6da989fee43ff52a9e3e04f0caac7c732e49430b1388a6cc5491b6bbc72d4e14857132c66ff4ba13dc04e0154", 0x8e}, {&(0x7f0000001440)="9ea481725f2a31cfdaf5463aeb089780d6ca3bba2f97a1ca40636447d2ffe5d8dbb38a05b0474109a9e64d9d86a1667313a87cbe7073aa16f8cf80f3feb22dd2c08c96ec239dbcf1d0a2b064f2b406b8604a3c2a8277df0a92fc595dc72b2075d40814805cffa07214f8d7095d976e2973e19277827fc17a320ec083df70ebdf5b25a79217160b1537e08ce095652f97d4399869e355a5602a83ace7235bd4467e5c6750ae4b5b8abcc3e2c3bb400a1ec7187e7d2574", 0xb6}, {&(0x7f0000001500)="1a731b1f4f71bc7962d55455253e09644e8c3b1fce176ceefc5dfd6db61c73d81ac34c1016cf44a75b0149e14e85802446eb9cfe18cc57f2574f5c9be4539c14d110d41a24cfefe0abcdf1e99cc0efcf6b5d5ae655b10a08de0db8b1df18986342ad9a20df9a1c02335786ee64420e456923f18b947007a9f73f7c878badfe275aaf127a32b023a220029a444ccf36e838804820e1a0338ab72bcdf4326952804bdb", 0xa2}, {&(0x7f00000015c0)="f6056d3303a5c2fe9a20df64671234feac900953ca7368fb2dc7f2f8ab4670115e8cd0cd26b980973a9044b0432d274043b553a1b4db4cffa19ee43336c28595c3db044e008a833c66d1f04466d22295cdcb95273182530273c967ce73a8e6d10095388af0a488d044df7c65a8a2efad57b2ba55c293b747640473d8bf48f5b6e3096680b616a84783ca6fddbd2e13beb4349b21ce688b8060adb0c176555d37fb259d50311005b24ad63edbd4a45d9abd09c5634a3bc54f57dd", 0xba}], 0x8}}, {{&(0x7f0000001680)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001940)=[{&(0x7f00000016c0)="f79bd246caeeb7ebf125b9309c535ba2eb3e28f1b512f7724843c56c844f13f87bb64c699990ed0df7363ad5c5c3973ed70b298bf726024348c786c6ea7c3acd", 0x40}, {&(0x7f0000001700)="323d64c8db8444ac39121ad7874393587bbaaa04d7ad409532e8d68471354c8b962c2bad335fc5a441df55130341ea8dd87908f07240949829768c4e2326407882016346f9ce4aa22dfd420aa1d4a9a88d82f47488c13fd8d04054fb7476cb0272244a4b76ee3ce88812da8db3d762e7d9a9c25c9be400b854ae244db743feea9a6b4ea7ad4d1cc4e189e704339102717db4e70b1d70938431966755c33e1bcd5784b7cbedf1b2f6f3f3cf57366c9bb79f600459bb2c582deeb309a5f67e9ba60ebd8c9fa06a281f2a873aab2f9bf8e5b4944f6edb31dcc1b74869aa4efa3a9ac3d508ae0c435818e090543ef4", 0xed}, {&(0x7f0000001800)="36055a7fbd785490212a77cd9f1de5c3da6a10bf6585f561a6a584983d00272fdc977f720d45a73638ce8321807f8310e00668a92c315c52106598fa269138e7d0e3fc62956be00ec42380899dbb6db7820be25b71be1c767de36d92bb5629e63b809c83265e355cd62baad214f59f1c1188afbb67816c8649e19ee1cb419c84820a5fda8f27316a10c85590e1548c3e34d84b6141cf1bc23eea7100520543896dd6d21f98f2b4", 0xa7}, {&(0x7f00000018c0)="56b39a5bc285c48028b172ebe33c6b0397fc8d4e2ebf5627c89647529954e5a14b81128c2e2e6fe7c508cc93eca123a496120c7635b24e5640560e7d285633e93b6f46506a617135f4fd1f9da8321fee448e479e2c4ba0761fdfede718fd767b4d5e0457ef846d865d384baf473a815a33f90b49beec", 0x76}], 0x4, &(0x7f0000001980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@end, @timestamp={0x44, 0x28, 0x8, 0x1, 0x6, [{[@loopback], 0x2}, {[], 0x7}, {[], 0xdb}, {[], 0x3}, {[], 0x8}, {[], 0x200}, {[@multicast1], 0x8001}]}, @generic={0x9a, 0x11, "cbe264b73dc9bda2d5684439ca3894"}, @cipso={0x86, 0x15, 0x2, [{0x2, 0x6, "2981f887"}, {0x2, 0x9, "a0723f84843b22"}]}, @generic={0x88, 0xc, "d8314360edcd4c414f47"}, @end, @generic={0x10c, 0x10, "2a4209df1aed6f0049c2e8155840"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}], 0x148}}, {{&(0x7f0000001b00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001b40)="65a4dc36ed8b002977a7f0cda9bfa5d2cb4c58caee07b95c", 0x18}, {&(0x7f0000001b80)="870249382a9d41f5b6203b367820475a6b49cea10a1e4a88d7592b9e6d36be8415a7dbe08e81ae5cc7e04b555adc466dbf63c06873ab999aeb88e5925a3a899520f3a41157beaea2433df21184b199b82e214065bab8c5fa2704071a8ca14eff9e17ae0f4dfe1a649096caef7a143f83646f99993b7bbe4ce528a65cf4eb4f79b94627544429243f6b0d96fb95ed266114d8b7745c32df370d961aa1ca4d10ddd3ab437a0267b5ee4bebbd500f52e5b2a8e123938430098f8a2bc04844", 0xbd}], 0x2}}, {{&(0x7f0000001c80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000003fc0)=[{&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="e042d5469ff4b24233e9d633cec1c9ad508db76664379caa708483895d0998547bb947749f0d8e5ab87865e1e004436b9e3e8abbddb059f5a181e78a3f3b9baa1a4dfba06ff5e59a278cfafc0751636f7d854fa1044a64508a323f91c00a89b9fe590f930cf7f10441c5ceb45fc6aa18e5a158b934464f89f5e97043f01cae7c7cd9ff479059f5cb3c2763ed9285c50dbc236b", 0x93}, {&(0x7f0000002d80)="765fdf594b61b0bd71e7eb1f65f571657c5b930f", 0x14}, {&(0x7f0000002dc0)="9d60838c35389f70223c0140775c732622ac0d17d06d01e6e5a3ebbdaaae976ac778626c6025bb9d50f3917c224d6d7c02318e8d2a682998fdd3ac61ef678501a8045595c4a772c1a66ed4a257c20ecbf3fa70fe1c419a1ab642d9b23e5a7f1f9bea6888addef8e076f97a13632185b09406fdbfc57272352d4c419fba629a9ab412be992dd7a9ea99fac32bc173f4da0e7f9ead8742aac6c9520045fa5c0b8a25ac2dce6833c3f1ba75dea8555d184fe80f8b2ddfebdfc0c2b59a374543317fbd36fb0deeb719a7b03dcceba34c85cdd368b00863ddf2b398d48f4cc1eac200c3f2de2708f7d39644b4bb8a", 0xec}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)="9da01432601cfaabd46d7e53c545b08cd806b6e578daee919b0efce11a7d1f1c63f63cfa706e90dc53739b22082983adc79bc4bf28a04a9a411aea7cedacc7a817729e21e0ea1a8f34d6d3e685590660fc93feede8365412de2c345aa90445d94e", 0x61}, {&(0x7f0000002f80)="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", 0x1000}, {&(0x7f0000003f80)="0d7ceaec7cac60cfb452fa048736da7e2973edcf84bffa65e75bf59a97ffaccc2e66e32884cb9ae04281cbeb8de76439d377f1594deac9b5b24e", 0x3a}], 0x8, &(0x7f0000004580)=ANY=[@ANYBLOB="1400000000000000000000000100000007000000000000001400000000000000000000000200000002000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14141bac14142a413e5d782abd0000000000011a50ef463beccf8ba2b2c36e9c0000000600840c8738902f6392bd8ff9089dda", @ANYRES32=r4, @ANYBLOB="00000006ffffffff0000000024000000000000000000000007000000010af588440bbaf63afa00820753daf5b92e0000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="000000017f000001000000001c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="ac1414bbac1414aa00000000140000000000000000000000020000000600000000000000"], 0x108}}, {{0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f00000046c0)="b0469c859d378d7bd3d93b5dc55df1ebb31c3fc135e9cf4a6a947600dcb0e6ae05f1030e6bb0b31cac05b4d4e828d186e7fa8d2f4d4db2a527f9ddf264aef34144792b7160604505e5b5f202274918f2b9d89a1b43f0409a581980181e5e58c504ee25c903d921c5e6f015043443b34e0ebd41b2758a534b386e20a7515ca434a21d5c8cdaabb4c93a772fc4d41194eaa54d334782e81abe09bee8b838f24a5b824d6613546a7a528dd618a18905b5acb7", 0xb1}, {&(0x7f0000004780)="115c55ebf17b9c857df53f0829f9cdce48f70585c986494de5dd4d5d0e2b2b981bfc244767f95bf3e6cd2c79ea6e4bcc8c58fcc19c51dc0d0b8e2f05c1e5cc678b5c619967e0bd9cc1336d53a7205b912579081f5e9ea13a6065e93a12379153830d0c80a07b946582965878e35886d92982d82ebf1ed147d3ff5d4bda513fa72f07bcca63c7a56ba8ef50e684d1c74caa19332762fc6286f4480d722012dd952ecacff91aafa482549f5bf5b0f1b4723ad9876b5ad2b3e550ae68be882d936361501536", 0xc4}, {&(0x7f0000004880)="f6c345c32dcca56850a484f7aba32fc63af11589125b2ffbf64a8bd5a5271037b69aa9b291f75a10a30f1728999c9c317cccd9f6a62d93886cb3e453f8149695e9929883d176bcd296c39510bf790769b2e739623ae117886251f32ecb953b764a878b14760ab80cfe2c75a96e423e16785f26d79ec30b8fd6043e95e393a1b0f5f640bf4a8e82bd45c475c5a4ddbe10b1183dde3b7efde6bcf6ea25a1a05fe6940dbf4b61f821e54ff281e04e7ab3af27a4edc7a5eb944b1844679715b59286ecef68b29d762de4228dea846c72f5da2ae91dab7ba28e0d606f67845d0bb79a3b3b43fabeb9bd987bccbb45a3d3560d69e0468b0e11efb2e95b0924f2", 0xfd}, {&(0x7f0000004980)="9095365c6db08b3cff14156dc23bc743e51e95cbab2859d5b59e572a1ea580222ae8e556cd8b86a15c569090bb5b19135f00b29b6c6a917553944fb280b21db550da259efa94525c8b46d5aa39e8299aca2d46e7928eb76e482017e0482d99afba0f8c6d05583ea4620d05bc6842c4ff4b5c1c75b9c43dff8fe74634b32d2bf74e6ba9815aec2a1fe3417e9023b9ab433afbabed77742a47cea11a61b7207a448ea6584507344ccb2eb3fc6fee28e9accc715b1d5a8c24b9014b17c94748d5a795f5d066b2133760d87041293366929f917b1e", 0xd3}, {&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="68ce65c497eb4e220415be5772a15c7a6043b499494b1bff072733b130f704611f9a0bf9e1db3ba96f56a6a8b388b2e5bf2b18eab84968c22f3a83660cb7b78994ba908b7f5a198b43343bfd98477c239ae7c22fc8bdb48c68ef35df7cd3af48cc42f326b58b4f27b0d4b371a5ab0cf250b6b30fa699e63c569bb357", 0x7c}], 0x6, &(0x7f0000005c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @loopback, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x68}}], 0x5, 0x24040504) 08:07:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40042, 0x0) finit_module(r0, &(0x7f0000000040)='posix_acl_access-!md5sum\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0xffffffff) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 556.815339][T16745] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 556.815339][T16745] program syz-executor.1 not setting count and/or reply_len properly 08:07:23 executing program 0: r0 = gettid() r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001e005f0214fffffffffffff8070000030000000000000000", 0x1c) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r3, 0x1000000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendfile(r2, r4, 0x0, 0x1000000004) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000200)=""/208) ioctl$UI_SET_PROPBIT(r8, 0x4004556e, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000040)=0x2, 0x4) tkill(r0, 0x1000000000013) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r9, 0x40044900, 0xed1) 08:07:23 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, 0x0, &(0x7f0000000040)) 08:07:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="08a241055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400e50d000011000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080001000000bcd6bd941c5fab18edbb00000000003306d0f8c776cf12804b1511f9c506c9bdc08386c010b54fcb524d3a45e9a7d130517465ac82661b7a2b2ff934dde31b2906a3db578cbf8138f8636cdab61ad7063148cda84a51f4cc7559a81672790e1e0625b31ad49f89a76c53466eee5f2b3d7937ecd996f7e532fd15a66aee7cfb76e153a6d1241969"], 0x38}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x40000) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000180)={0x81, 0x1}) 08:07:23 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, 0x0, &(0x7f0000000040)) [ 557.112425][ T12] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 557.145615][ T2855] usb 3-1: new high-speed USB device number 57 using dummy_hcd 08:07:23 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_timedreceive(r4, &(0x7f0000000200)=""/195, 0xc3, 0x1000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x10) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r11 = dup3(r8, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r11, 0x7001) r12 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r12, 0xb701, 0x0) r13 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x1) ftruncate(r13, 0x1000000) sendfile(r1, r13, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x30000, 0x0) ioctl$BLKRAGET(r14, 0x1263, &(0x7f0000000440)) tkill(r0, 0x1000000000013) wait4(r0, &(0x7f0000000480), 0xe, &(0x7f00000005c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000100)={0x0, {0x6, 0x4}}) prctl$PR_GET_NO_NEW_PRIVS(0x27) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) r15 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x440102, 0x0) ioctl$LOOP_CLR_FD(r15, 0x4c01) 08:07:23 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, 0x0, &(0x7f0000000040)) 08:07:23 executing program 4: set_thread_area(&(0x7f0000000080)={0xffff, 0x20000800, 0x5400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xffffffae) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="000f01"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 557.352441][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 557.424397][ T2855] usb 3-1: device descriptor read/64, error 18 [ 557.472698][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.484122][ T12] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.497297][ T12] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 557.506585][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.524029][ T12] usb 4-1: config 0 descriptor?? [ 557.594342][T16753] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 557.594342][T16753] program syz-executor.1 not setting count and/or reply_len properly [ 557.822619][ T2855] usb 3-1: device descriptor read/64, error 18 [ 557.987619][ T12] holtek 0003:1241:5015.000E: unknown main item tag 0x0 [ 557.994935][ T12] holtek 0003:1241:5015.000E: unknown main item tag 0x0 [ 558.002840][ T12] holtek 0003:1241:5015.000E: unknown main item tag 0x0 [ 558.010117][ T12] holtek 0003:1241:5015.000E: unknown main item tag 0x0 [ 558.017408][ T12] holtek 0003:1241:5015.000E: unknown main item tag 0x0 [ 558.024883][ T12] holtek 0003:1241:5015.000E: item fetching failed at offset -648800514 [ 558.034111][ T12] holtek 0003:1241:5015.000E: parse failed [ 558.040047][ T12] holtek: probe of 0003:1241:5015.000E failed with error -22 [ 558.122804][ T2855] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 558.185945][ T12] usb 4-1: USB disconnect, device number 53 [ 558.422873][ T2855] usb 3-1: device descriptor read/64, error 18 [ 558.812311][ T2855] usb 3-1: device descriptor read/64, error 18 [ 558.932596][ T2855] usb usb3-port1: attempt power cycle [ 558.962269][ T50] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 559.202267][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 559.322495][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.333752][ T50] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.347022][ T50] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 559.356414][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.366863][ T50] usb 4-1: config 0 descriptor?? [ 559.662313][ T2855] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 559.882451][ T50] usbhid 4-1:0.0: can't add hid device: -71 [ 559.888686][ T50] usbhid: probe of 4-1:0.0 failed with error -71 [ 559.898183][ T50] usb 4-1: USB disconnect, device number 54 08:07:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x2e, 0x2, &(0x7f0000000040)="a34747e865af5cf11e34bdff7a7a5ba0051aae5804d5a05d9b9ff68e12bb4d43a20375ea905795449b957e956aa6", 0x0, 0x401}, 0x28) 08:07:26 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, 0x0) 08:07:26 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) r3 = socket$inet6(0xa, 0x3, 0x3f) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x20000002) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:26 executing program 4: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000005, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00000c9000/0x1000)=nil, 0x1000) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x20) 08:07:26 executing program 3: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') truncate(&(0x7f0000000100)='./file0\x00', 0x0) [ 559.932997][ T2855] usb 3-1: device descriptor read/64, error 18 [ 560.022620][T16806] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 560.022620][T16806] program syz-executor.1 not setting count and/or reply_len properly 08:07:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002f5ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000968ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@file={0x0, './file0\x00'}, 0x42) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000fa3000)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) 08:07:26 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000300), 0x10, 0x0, 0x1c}}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) 08:07:26 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, 0x0) 08:07:26 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_dccp_buf(r5, 0x21, 0xc0, &(0x7f0000000000)=""/146, &(0x7f00000000c0)=0x92) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x100) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpgid(0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:07:26 executing program 3: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000100)={'lo\x00\xfe\x00', {0x2, 0x0, @multicast1}}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x2) accept4(r2, 0x0, 0x0, 0x400) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004a80)={{{@in6=@rand_addr="0fdc1885ccdb189208ce1da1e4ed5434", @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x1d}, {0x4000000000000000, 0x0, 0x5, 0x200, 0x7, 0x2, 0xaaad, 0x5}, {}, 0xfffffffe, 0x0, 0x0, 0x207736cbb969acba}, {{@in=@remote, 0x4d2, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fff}}, 0xe8) getpriority(0x0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0xa26, 0x5, 0x0, 0x0, 0x2}, 0x14) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0xd1102103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:07:26 executing program 5: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, 0x0) 08:07:26 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 08:07:26 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A\xf1\xa5\xe1H\x16\xd3r\xf6i\xb8\x978\xa2118\xc6\xde\xf6\x1en\x00\xd3\xb6\xb6\xfbZu\xabL\xebb\x89|\xca\x0e]\xdeq\xdc\x10\xe3n\xc5\x85\x80\xe4\xc0\xb0\xa5\n\x800\xea\x9cf\xd5\xd1R\xb4>\xa1\xac\xbd\xcbN\x94\xb5\xda', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000002c0)=""/192, 0xc0) [ 560.936034][T16859] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 560.936034][T16859] program syz-executor.1 not setting count and/or reply_len properly 08:07:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002f5ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000968ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@file={0x0, './file0\x00'}, 0x42) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000fa3000)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x44) 08:07:27 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x2}, 0x20) 08:07:27 executing program 5: getpid() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) pipe(0x0) 08:07:27 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) close(r1) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r0, 0x1000000000013) 08:07:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @loopback=0xfe800000}}) 08:07:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007340)=ANY=[@ANYBLOB="e8"], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0)=[{0x10}], 0x10}}], 0x2, 0x0) [ 561.720926][T16883] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 561.720926][T16883] program syz-executor.1 not setting count and/or reply_len properly 08:07:27 executing program 4: 08:07:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 08:07:27 executing program 3: symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file1\x00') open(&(0x7f0000000040)='./file0\x00', 0x48041, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') 08:07:28 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) mkdir(0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='security.SMACK64IPOUT\x00', &(0x7f00000002c0)='IPVS\x00', 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240), 0x14) r4 = creat(&(0x7f0000001600)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) write$input_event(r4, &(0x7f00000001c0)={{}, 0x0, 0x9, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r5 = socket$inet(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) sendmsg$nl_route(r3, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='./file0\x00') socket(0x200000000000011, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00'}) inotify_init1(0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0xa96000) 08:07:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000280)=@known='system.sockprotoname\x00', 0x0, 0x0) 08:07:28 executing program 3: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000005, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00000c9000/0x1000)=nil, 0x1000) openat$dir(0xffffffffffffff9c, 0x0, 0xba7b41, 0x0) 08:07:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffffffe, 0x20e000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r6, 0x401}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48190270}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x6044004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x4001ff) ioctl$KDDISABIO(r3, 0x4b37) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000300)={0x1, 0x3, 0x7, 0xa0c}) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:28 executing program 4: 08:07:28 executing program 2: [ 562.208853][T16911] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 562.208853][T16911] program syz-executor.1 not setting count and/or reply_len properly 08:07:30 executing program 4: 08:07:30 executing program 5: 08:07:30 executing program 2: 08:07:30 executing program 3: 08:07:30 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000000)={0x3, 0xc, 0x4, 0x4000, {0x77359400}, {0x2, 0x2, 0x5, 0x7, 0x2, 0x9, "d053b4e5"}, 0x2, 0x2, @userptr=0x7, 0x4}) tkill(r0, 0x1000000000013) 08:07:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) read(r0, &(0x7f00000001c0)=""/196, 0xc4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x7ff) [ 564.650285][T16935] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 564.650285][T16935] program syz-executor.1 not setting count and/or reply_len properly 08:07:30 executing program 5: 08:07:30 executing program 4: 08:07:30 executing program 2: 08:07:30 executing program 3: 08:07:30 executing program 5: 08:07:30 executing program 4: 08:07:31 executing program 2: 08:07:31 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f0000000040)='\x02\xa6G/\xaa\x9f#*#\x00', 0x2, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:31 executing program 3: 08:07:31 executing program 4: 08:07:31 executing program 5: 08:07:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = dup3(r0, r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r4, 0x0, 0xe5}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:07:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 08:07:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='\x04\x00\x00\x00\x00\x00\x00\x80\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x606380, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x3, 0x8, 0x6, 0x5, 0x80000000}, 0x14) read(r0, &(0x7f00000001c0)=""/196, 0xc4) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 08:07:31 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) read$eventfd(r2, &(0x7f00000003c0), 0x8) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x7, 0x3f, 0x0, 0x0, 0xfffffffe}) syz_open_pts(r5, 0x0) close(r5) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)={0x7, 0x8}) r6 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x14) dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="2ce05ac02c40121f2f73d7ab370d513162", 0x11, 0xfffffffffffffffb) keyctl$set_timeout(0xf, 0x0, 0x80000001) add_key(&(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r7, 0x0, 0x0) add_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f0000000a80), 0x0, r7) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r3, 0x800fe) sendfile(r6, r8, 0x0, 0x8000fffffffe) 08:07:31 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/92, 0x5c}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000680)}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) syz_open_procfs(0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000340)={0x101, "50bd943499c4ec4d15408dfbc2a6ae54dd85d77dbe72fab194d0f1a75517d63e", 0x2, 0x0, 0x1, 0x40000, 0xfda38470ef3ccfd4, 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) 08:07:31 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x8}, 0x8) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)="05118e62a52d090c6a019b216e5c48c78280714971fd0a5e678431a1234f5666c0101202c5ce0ef96c7f926ea0d0b61634c1b1c665fcf9cca6368843d618e291edf82c84c1df5c9ac90df4caceb338789e8aa1040c1beb425a8758a425f263bc9319b64cc73bca623b9fee8bdb2e0f13552640e557983c94b1c183f37df66e31453b4f8b5ca92399a81030677e9871a5ebcf941127b327e09a224f1fe12dea8bd73ce39e6ccdff14ce8591b5eb4f28f92e38a97110b100199bdb5e0b92bf63014dda69d8beec3d2d6d", 0xc9}], 0x1) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 565.445599][T16969] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 565.445599][T16969] program syz-executor.1 not setting count and/or reply_len properly 08:07:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) r1 = gettid() tkill(r1, 0x1000000000013) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0xf8b155b8a407774c, 0x1, 0x8000, 0x6, r1}) 08:07:31 executing program 2: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x4]}, 0x14}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) [ 565.751086][T17000] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 565.751086][T17000] program syz-executor.1 not setting count and/or reply_len properly 08:07:31 executing program 0: r0 = gettid() getcwd(&(0x7f0000000280)=""/35, 0x23) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000440)="a75deda6bd0b077d1bab999ab3a79a543e9eb91966bbddbd3f9fffa7268cc8485f238a9fd7625170032caafc5948aa534d6b1c4b0508507a9b2dc5775b5528edaa67", 0x42}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x800) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) signalfd(r4, &(0x7f0000000080)={0xca3}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_S390_UCAS_MAP(r7, 0x4018ae50, &(0x7f0000000240)={0x800, 0x2, 0x3f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000500)={0x0, 0x40000}) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)={0x1}, 0xffffffffffffffc7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup3(r11, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r13, 0x400445a0, &(0x7f00000002c0)=0x2910) tkill(r0, 0x1000000000013) prctl$PR_GET_TIMERSLACK(0x1e) socketpair$unix(0x1, 0xa, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup3(r14, r15, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$DRM_IOCTL_IRQ_BUSID(r16, 0xc0106403, &(0x7f0000000200)={0xfffffffd, 0x3, 0xfffffffe, 0x9}) 08:07:32 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f0000000000)='\x00\x00\xeby\x00', 0x2, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ftruncate(r2, 0x7fffffff) sendfile(r1, r2, 0x0, 0xfffffffffffffffa) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:32 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:32 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000000)={0xa, 0x7, 0x20}, 0xa) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0xd90bf9002788545a) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[], 0x29}, 'syz_tun\x00'}}) r4 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r4, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_CONNECTINFO(r7, 0x40085511, &(0x7f00000000c0)) 08:07:32 executing program 0: r0 = gettid() wait4(r0, &(0x7f0000000080), 0x1, &(0x7f00000000c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)={0xf8, 0x4, 0x8001, "8db84f97e8c9b4f98fe20656e5020c5c78afa393ae86109fca80c27abdb166914cf5e0dc1453b57571a0321e83360b673d5ea02833349bb3f0b62becd9b600001a80de144e95a759681be2bd316ab6c086384d3377fed7efe653845016fba2d052acdb8d681a5693f2e601effcbae61b3078ee30d82936e172cf1ba61d4dc863dd84af7624ba5acc40ebe6623955345763c2c1781f76b9ee841274043c39d7ef1cf6bb34cbf4232f56210f3154e9dd6c84d69b92a75508e99d707a8025c092c4bef8ba24bec767fb04601dc597526cafefcb7b68663fd1c4010b45304ac54e24e756ec6629f02bf76372731296654af50ebe54831bbb6212"}) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) r3 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r3, 0x1000000) sendfile(r2, r3, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_mreq(r6, 0x29, 0x6e1cabe5f5b894f0, &(0x7f0000000000)={@loopback}, &(0x7f0000000040)=0x14) tkill(r0, 0x1000000000013) 08:07:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000086a0519030000000000010902240001000000000904000009030000000921000000012222000905810300000000009f069210d520a5b71235743c8a4cc8d82f686b854e987787ba0b7d37d2e3db247584149f7dbbddd32cc9ccb1d14cdd283ee4613cc781aa64cda35bb7f08d005c74885dd52c09b5836ae10fcb6d6a8512ff4d4bac15597c593367665e9dd5342561ddd0493d69487c4d2ee2e00e020d5dec6170adba06791ed7be512593ee2696f792aaeac12abaa0f7155a67108298"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0xa, 0x1, 0x0) connect(r1, &(0x7f0000000340)=@l2={0x1f, 0xf872, {0x40, 0x2, 0x9, 0x4, 0x48, 0x7}, 0x7, 0x80}, 0x80) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r9}}], 0x20}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r6}}], 0x20, 0x1}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x80, r6}, 0x10) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f00000000c0)={r6, 0x2a40}, &(0x7f0000000100)=0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000003800bedc2a54431e640a78bbd409a8800000000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 08:07:32 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1200001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x922, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0xc72f5f11994db931}, 0x39086712e276d3f6) 08:07:32 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) sched_rr_get_interval(r0, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1fffffffffe) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000100)={0x2, 0x6b, "ab25b227a9c5afcd97be6157cb6072d4460cd022df0767c3ea24d2960977c504dbe7143981c51fcf59f64ef222dcc03cafb542c468f36b876066e76b57f9effb2c93304cfbed2c2a1caf563d8a4f76f0ce55b16f56df73b16bb9af295e8b89b10f661f1100000000000000"}) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000040)={0x1000, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000080)={0xa371, r7, 0x10001, 0x4}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETX(r2, 0x5433, &(0x7f0000000180)={0x6b8, 0x6, [0x2, 0x80, 0x4, 0xc6f7, 0x9], 0x3}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001440)={0x2c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f13000000054047462e90b026634817cb27cdbec4e17044c6808bd2290f1300020310000b10010080af6000ddcf1b9eefd151268732fcc8ed05741da333f233fb14cd4aa834681bd2f2f75fb857b2606f33480f76537559fe906903a4bdd30b72e18ac9f78b98dee0d4d45157f9784c6a838539fd7dbcb0f680b41365ffe7"], 0x0, 0x0}, 0x0) write$hidraw(r4, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) [ 566.876354][ T50] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 567.132254][ T2855] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 567.132303][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 567.254490][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.265584][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.278664][ T50] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 567.287888][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.301384][ T50] usb 5-1: config 0 descriptor?? [ 567.385738][ T2855] usb 3-1: Using ep0 maxpacket: 8 [ 567.502613][ T2855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.514002][ T2855] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.527138][ T2855] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 567.536407][ T2855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.588918][ T2855] usb 3-1: config 0 descriptor?? [ 568.074070][ T2855] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 568.091019][ T2855] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000F/input/input22 [ 568.152920][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 568.159246][ T50] usbhid: probe of 5-1:0.0 failed with error -71 [ 568.168480][ T50] usb 5-1: USB disconnect, device number 16 [ 568.184629][ T2855] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 568.291321][ T2855] usb 3-1: USB disconnect, device number 60 08:07:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000000c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) connect$packet(r1, &(0x7f0000000300)={0x11, 0x18, r5, 0x1, 0x7, 0x6, @dev={[], 0x21}}, 0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x88800, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000200)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x401, 0x0) ioctl$int_in(r2, 0x800000c0045009, &(0x7f00000000c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x4, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffe8f, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[], 0xfcb1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) shutdown(r4, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESDEC], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200), &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000001580)={0x0, 0xfff}, &(0x7f00000015c0)=0xc) 08:07:34 executing program 3: socket$kcm(0x11, 0x8000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000001440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:34 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETZCNT(r3, 0x0, 0xf, 0x0) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000000)=""/138) tkill(r0, 0x1000000000013) 08:07:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f00000000c0)={0x2, 0x3}) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0x8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000140)=@int=0x662, 0x4) syz_usb_connect$cdc_ecm(0x2, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109023b0001010000400904000000020600000524060000052400000800000001000000039e94000000000000090582020000000000090503022000000000"], 0x0) [ 568.832499][T17078] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 568.832499][T17078] program syz-executor.1 not setting count and/or reply_len properly [ 568.858449][ T50] usb 5-1: new high-speed USB device number 17 using dummy_hcd 08:07:35 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x0) 08:07:35 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r9}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000140)=r10, 0x4) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 569.112319][ T50] usb 5-1: Using ep0 maxpacket: 8 08:07:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f0000001440)=""/4097, &(0x7f0000000040)=0x1001) [ 569.262378][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.273506][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 569.286544][ T50] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 569.295747][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.360704][ T50] usb 5-1: config 0 descriptor?? 08:07:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x8000000000000b0, 0x0, 0x0, 0x4cb], 0x12000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000100)=""/173, &(0x7f00000001c0)=0xad) 08:07:35 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000040)={0x5f9d86343b76d124, {0x0, 0x1c9c380}, 0x7, 0x1}) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ptrace$setopts(0x4200, r0, 0xd843, 0x10001e) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7f, 0x8001]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xbde}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000891}, 0x1) r7 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r7, 0x1000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x106, 0x1}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r10, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000480)={0x0, &(0x7f0000000300), 0x1, r7, 0x8}) r13 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000140)={0x3, 0x4}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='/dev/vbi#\x00') ioctl$HIDIOCGRAWPHYS(r13, 0x80404805, &(0x7f0000000000)) sendfile(r4, r7, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) creat(&(0x7f0000000500)='./file0\x00', 0x7) 08:07:35 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000000)=0x1000) 08:07:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYPTR64, @ANYBLOB="4b9fbc8ca4e8ae4b07b9f7fe9578"], 0x16) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@dev, @dev, 0x0}, &(0x7f0000000180)=0xc) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88}, 0x20094) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:35 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='*,+/ppp0}%}(\x00', 0x0, 0xffffffffffffffff) getsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000000)=""/4, &(0x7f0000000040)=0x4) tkill(r0, 0x1000000000013) [ 569.702793][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 569.709079][ T50] usbhid: probe of 5-1:0.0 failed with error -71 [ 569.729620][ T50] usb 5-1: USB disconnect, device number 17 08:07:35 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000140)={0x3, 0x1b1}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f0000000440)=""/4085, &(0x7f0000000000)=0xff5) socketpair(0x5, 0xa, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) splice(r2, &(0x7f0000000080), r3, &(0x7f00000000c0)=0x29, 0x5, 0x4ca31e5f007027a4) [ 569.781344][T17108] kvm_hv_set_msr: 70 callbacks suppressed [ 569.781384][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004f data 0x4d00000000f 08:07:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r1 = dup(r0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x20000) ioctl$KDGKBTYPE(r11, 0x4b33, &(0x7f0000000100)) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f00000002c0)=ANY=[@ANYBLOB="00200000000000009b4b7368343126f133182e353c45c6d43fc7dd091d7637e6c1f76861ca8360f6dc5fee8592b1c6fbe0dbf683cdcf4bfca010c57d50fe8b6a0a96e00a5992c8e20b3c7e25db0f12835cd9778ed23feac9161e3667334b0c66d1ea20338d1924bc7a68d6cdf0259a00a6418e7457619cd36e2389f2ff0aa20a7025e64fab68dab78a94c397807b2ffdff"]) [ 569.881439][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f [ 569.940519][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f [ 569.951609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 569.952218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 569.952917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 569.953376][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 570.006882][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f 08:07:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001380)=@urb_type_bulk={0x3, {}, 0x0, 0x0, &(0x7f0000000280)="c77e8e7110699c135f4e4d86beae67d665bb8286b930960d607fb4ef0aa3879b0e7746db71c0a5f94689bd4d082475ef6f3469f90b31e1eaea03b091bb5d3e0612ee5cb4f209fe889c2b940f850dbbb939", 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0xf12c5240c939206e, 0x7004, 0x1000, &(0x7f0000fec000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:07:36 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xac3a10abbbe49042}, 0x0) ftruncate(r3, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "20ce742c17f4457d", "128f1b196f70eb0ec8523018bfa9896294b46784a40611063caabddc40afedad", "f806d6f1", "66e03b1a83694545"}, 0x38) [ 570.048971][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f [ 570.069879][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f [ 570.160596][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f 08:07:36 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2f0000001d0005c5ffffff000d0000000200001fed9328fe00000ac9130001000000100050", 0x25}], 0x1}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x1, 0xf337818298534178) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/123, 0x7b) 08:07:36 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/ddv/sod/pomC\x10D\xa3p\x00', 0xffff, 0x100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x26, @dev={0xfe, 0x80, [], 0x19}, 0x1}, @in6={0xa, 0x4e20, 0x3, @local, 0x1}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x400, @mcast1, 0x3}], 0x64) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff4b, &(0x7f0000000080), 0x1}, 0x4000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x3, [], "0a1768ade04dc4ebc7deb80d6d679889"}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x10b, 0x3) r3 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x805800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0xc6ee}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40001) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000380)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_type(r6, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) r7 = semget(0x3, 0x0, 0x718) semctl$IPC_RMID(r7, 0x0, 0x0) [ 570.200972][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f [ 570.223312][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f [ 570.239528][T17108] kvm [17107]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f 08:07:36 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x77359400}}, 0x0) tkill(r0, 0x3f) [ 570.502934][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 570.509260][ C1] protocol 88fb is buggy, dev hsr_slave_1 08:07:36 executing program 0: gettid() r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() r6 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) tkill(r5, 0x1000000000013) tkill(r5, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$cgroup(r9, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) fstatfs(r10, &(0x7f0000000100)=""/31) 08:07:36 executing program 3: socket$kcm(0x11, 0x8000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000002480)=""/4116, &(0x7f0000000040)=0x1014) r1 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/9, 0xbdf7}) 08:07:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r6 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r9 = getgid() write$FUSE_ENTRY(r4, &(0x7f00000001c0)={0x90, 0x0, 0x7, {0x4, 0x0, 0x3, 0x0, 0x3, 0x1000, {0x0, 0x100, 0x9, 0x791, 0x100000000, 0x4, 0x2, 0xec61, 0x0, 0x7, 0x0, r8, r9, 0x4}}}, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x2, 0x0, 0xffffffffffffffff}) ptrace$setsig(0x4203, r7, 0x0, &(0x7f00000002c0)={0x16, 0x101, 0x7}) r12 = dup(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup3(r15, r16, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r17, 0x29, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000f00600000000000048030000000000000000000048030000200600002006000020060000200600002006000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300258020000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d3000004d4f40b0000ff0200003801727400000000000000000000000000000000000000000000000000000000018000000700000000020000eb07000010070000fe80000000000000000000000000000e00000000000000000000000000000000fe8000000000000000000000000000bb6d687c5e5817ff466b05d7d10f838cdf0000000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000aafe880000000000000000000000000001000000000000000000000000000000007c3a602621e64b723f92b2d881d4c080fe800000000000000000000000000015fe800000000000000600000000000013ff01000000000000000000000000000100000000000000000000ffffe0000002fe8000000000000000000000000000bb0000000000000000000000000000000106000000280052454a45435400000000000000000000000000000000000000000000000005000000000000000000000000000000f9dcea0200000000000000000000000000000000000000000000000000874d145844c78d3bc74141cc5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b002d80200000000000000000000000000000000000000000000000090007372680000000000000000000000000000000000000000000000000000010040401f01000000fe80000000000000000000000000002120bcab8700c25c1eadb9f58c81b59bf0ff010000000000000000000000000001ffffffffff000000ffffffff00000000735427c1fffffffff7e8e471fffffe00ff00000000000000ff000000000000ff10002010000000005801686173686c696d697400000000000000000000000000000000000000000368737230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d20f000000000000e500000000000000000000001572be4400020000ff00000002000000ffffff7f4040000000000000876b000000000000280052454a454354000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009eaa800d0000000000000000000000000000000000000000000000000002800"/1780], 0x750) r18 = dup3(r13, r14, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000380)={0x3, 0xffffffff, 0xfffffffe}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40000012, r12, 0x0) r19 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r20 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r20, r19, &(0x7f0000000040)=0x100000, 0x8001) 08:07:36 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100), 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0xffffffffffffff51}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000000)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 08:07:36 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x3, 0x2, 0x6, 0x9, 0x8, 0xfffffffffffffffa, 0x80, 0x6, 0x6, 0x2, 0x1, 0x6, 0x8, 0xff, 0x1900000, 0xaed], 0x10000, 0x2304}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) read(0xffffffffffffffff, &(0x7f00000001c0)=""/196, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) writev(r3, &(0x7f0000001b00)=[{&(0x7f00000019c0)="14727eaa6ae42ef73f403687e0c3aaba3b270a3d400c307572359169781483c9fece54f6d2e76c855d56b520ee7af4f014b97830a6828bebc939ee087b15f15672f8ebbda96ddb1f63f823933957dd4304ebe5dccabab52a62d4d3a252d3e6c59a4280757d317311a3020c429516efe90d868aab165c1331028a110562d415610565b73846f54da0b783e6daae87a9cb120b", 0x92}, {&(0x7f0000001a80)="11dfaa980f70bc31f31cbb2c24b73a40a20742da02f05b964e29d02433c43e6566ea5f3ba102991592d1f32f666e", 0x2e}, {&(0x7f0000001ac0)="bf7ea92c56551f13ee43c34d7b158cd707e84f1f7e1180166e111e2580d9de51928092cb04a37e58da7d4b8e0d709f2f60c2a502b5837226ee3fd21ef1c5", 0x3e}], 0x3) writev(r0, &(0x7f0000001900)=[{&(0x7f00000002c0)="40f103a438088d8409caa2fa5a3c0ac9cb7b54e23779712c80125cb34e4f97a947d7159e543509912971cd09af2371c45f33d99bd1f97050663ccbbff2ab2f3eba1aa168eb064dac639eadc6bdfefcc32305bf", 0x53}, {&(0x7f0000000340)="770162efb0ae6075532f1dc2c2d2e1dca6e720c8af235522991a9203f116c1cedcaab0db81bf843568c6f1ef2a1a30fdfa936cf8030b67e175e0f08c72fdd62219fc9a9f67a0d4bf808ad646c9dbb5b1ed9ecb88b292c45ecd5078dc19da254b707cf8a351f599fa0f44387c51ff97e97031a207b18a78e119205a8d6848c9ea7dcc1ce8e89d15f38b5bac9b82d88b914991fc95e553dc3021572e397ca70e772aa95e7cd76ac57ea5af9bb35ff7739d52cd7b5105171653357ce15f4d870d202c725a72a901a8555df3c26579dfd9ec1d41d8d0c1556a085361c96b7387f7c74d289aea6f677c6d47640ebcba", 0xed}, {&(0x7f0000000440)="b3874ae62b79be5fcfa0cbcb7442c76e981960188d1f9387cd74d70ccf5081c75043e82f77b7d8906e90504e43881755e32fde41f82df8ecdaf86837e612153f1450d1b64568b2ace3bbb01e6f36c4a983efa8e0e39f4a20", 0x58}, {&(0x7f0000000080)="f589c7060873512b3f11b263aa65bc1572b16caa50c19956da6608c1ed82f3286ff79b5933ba", 0x26}, {&(0x7f0000000540)="c4cdbca4a9945846a2611199d2131f8fd4729338986572cc7fca75f80ae3cb7338200112c10408b7ca68097fbb1f50093e69fe14eeca17611465546d5bcb660f98dcae249ed612e4a0c6bff033b176b5c68847ab6c2ce06842c80b6c98e829e105efd5d698579975f1e30e669dbb6d388d40bacdb4a31a74863103cfb424365c1d51f3324a856e302affbcdc3b587ae88eb512f0b30f92cf6fac4b55f2a1e3", 0x9f}, {&(0x7f0000000600)="5b9d5199ef2cef07caf3f3d15545e3c5067039b66866ed97bd21e70ca1ab4aa75069b03a2b42d3b80c868f7b8c9d753814e1ea9dd651865a3d1256e78d56a6a19d46e42974e5a478b57d09d540dcee7127b7da837fd74492495038e26105fdbb2b5a0815f71986b96936de6be50d5f4802256b9a838361d25e0c2c3e0c229b3b53081989f2e4c955ed8ff4a48233130ddf829d974ad2928019f61e87a8029c03c7cb6467a6313b3ab0c5e9536eb80531d7bd68d65364e338af3022d6b927403e6a61cbc7ba48b10cb38839b4d0127e1be2613245f21c4d7d7558f89a51528b6970db25e2dd961c", 0xe7}, {&(0x7f0000000180)="7813a10dc6e2cf98e1e639ce279e9d0fa9b7aa7f00a509486d946fdf577dcd77c84c148d03ba3db99014fe680b", 0x2d}, {&(0x7f0000000700)="35cca2179a4dce5ad10321dbeee55f0a4a81f71013c61597cebff6e6250111bf0dda61b8163498e382b6694a944ec9d52bb6ff1b753a296bbabc364436253f06c0f205b893c60296472bd1c25f5ce82c8016235933f6a80553714cde2b9cf87e87b0212b7611f4e6e01cb9f3ba267ce2fbd41ef0c2e55c5a773f7f7baccf5e60e020e494e577b8443eb209fb3f3cd1da9074610e0b5df14abf8cd79ecc956e6ad076f33285c1d68052c11df5c5f4d2824341668d9ad37702c63d9339132704bd6b04270932802da3653afcbd8456fd307748a390bc897d5fa63c43f2fc700105f8df2339e97507", 0xe7}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="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", 0xff}], 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) [ 570.825304][T17156] x86/PAT: syz-executor.4:17156 map pfn RAM range req write-combining for [mem 0xbb120000-0xbb122fff], got write-back 08:07:37 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x38100, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x200000) timer_create(0x5, &(0x7f0000044000)={0x0, 0x20012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x37) [ 570.999410][T17156] x86/PAT: syz-executor.4:17156 map pfn RAM range req write-combining for [mem 0x13d60000-0x13d62fff], got write-back 08:07:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)="25ee38829434311cc38d6769656d5d8654b2f86656a8239c40b06c947d4d191eaaf6cac9d6b3b5ab5d7474993cb221f54cd674596f214066d2a904adefff3a48cf54a2c23f396304f559c2225459247a4dce3e47186ad6786a7178176e38daf67505ecdb9fdf6ad20318f9cce4786105ecd78416fb1066cb106c29c578857bad84d23671816108fc82346b09c0157d6bb423aefec3c19552d79e07ababad2ae26bc85f66ae5d0c8b", 0xa8}, {&(0x7f0000000540)="9943c17f49ee59f0da2c771cc8291133355e8263187878375ebd52378b9cbf6e87", 0x21}, {&(0x7f0000000580)="ff0bc6fd8123d5d47639b94a9289facbe74232ae2ccb26c6550164", 0x1b}, {&(0x7f00000005c0)="9b943ac1e8f54b37959e7c0359c1853f2bd37ff7d29e87c12978098e7d67fee3d81a00475b1fab8b42d4a071b57a4fe99df78306b656852914603530f8739902bc0e5b9d3267ec075767966d1fd9ace796bd4470091d8c830ac3c83df32e7c58d1aee06efe24ea4199e5d43a36ca8b6068bce8a317e0e93d5c9e2335e73583e1e4e11321637e166ea0e1f151f6e807265b9c9c0f9fb04b2e18", 0x99}], 0x4, &(0x7f00000006c0)=[{0xd8, 0x84, 0x80000001, "57e587f5e2cd03ee27f0f69ff16137f4c7ba359dd9f2635e7794aab4b3563533b93d0ff30bc5c00bae6852e416263e025d0725052fb6936793d7143fff052585591bbc02826e88fa6a4ca9181cf1f7eef753696587309b2a719f2ea8895ee64f5cc6e29cfc9e93546b9b5a0fd44e2552bc74e45a1571120f669a087aeba088b857b9485694bb4d115e9b50473859dce90582bb50ab8ad25d1874289862412b37e1e602675f986d54555c220ac5b1daf6db2d963b48bf1c78c85479dd38ccb796e1"}], 0xd8}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYBLOB="3974376a71f616eb0821c39ab768b9046bd7fa9b8bfa29fe99b06469c68a5c1df85f49dd1120d985a3fc53e99664902d43a09f68331e6816f5cde5cb5de0fd05abacd6b984a12b1923b320b8f096ddec8781a207e1346cfb1b08d3d21a09e0b39293d6b0c15bacfb4f855a89541029619969c4944d5f6569cbbdce5465d89c1345465fa8142bcf0f2df1317873ce1a9483a912cea8b066e70e6c210c7a56820f2da95a31e5291d575788e9674a802c88f93f50dcdfed9c939fa420dd"], @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRES16=r1, @ANYRES64, @ANYRES64=r0, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r3], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="492c78e8a095fbc8892a719bfcb099a8e478cab235e9364cbb647f8b9ebdcda0b217d4e3aee7ccd646bc1dbf4684b224e8d35964c667e6c45b82be7d7a2ac113ad16b5b3ac43593ee25c25803cc50b3a42bbc0ece46eeddc81bc6845221a5996579cdd659624cd135ae22807e1e034c59b1b22d10bcbe4a0b3345a87a72fcc"], @ANYPTR], 0x51}}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r5 = socket(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendmmsg(r6, &(0x7f0000001000)=[{{&(0x7f0000000800)=@ethernet={0x6, @dev={[], 0x14}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000880)="e8006a8d5d74f6f2df8d70e83b7e08118e684aec34712792767e1a2520d1995cbce8a7aefc25a442f83909f6b64a60d1c7b68a02c7aecc51b4e1ee2abd236637050d1b3c18b22ca5807d47124c9ea90ab93b6ecd0af66c45c5cc", 0x5a}, {&(0x7f0000000900)="a9b094ba46cb8e0339432bd42c430b3c71fc7383aff3810c96aa286c4537997254b77ca90c6e6ba8faa24ff456d39301692a7aa9ddc67ae68e35ab43f7350c9a3fad91e06ed21b736a8892a83fda879fac5046fc5cd952236bf28fbe9fba265a5419d5cd5fab0f0cb25580fcea8dc0cd9cc9b4ba21600c37368599f71b5cfbbb44cdb946ae1b3e282be6c8a9e223e17d77cfaf293eddd972e0da6d283bc0e024569fc9585d8232f5fa4a02f0b6f624a3a32f2940f1eb37b2fdc6e6685f0f8eb8f7fe83724ef23b69b1024c10ae5392ff763b9827bbb90bb5e0", 0xd9}, {&(0x7f0000000a00)="19eef3d12a9221c6f118a20b0bd2ba313600328d25236479b95015ef6716beae966d3d86d717bf4344d598d4c940d8ea70d610c0a125009000d0a95147cc4a70cd02331517c4abba7258681bd6bf1a7f383aee04f86328ca39049824a8923f2275230b90a030cacf47303b4bd784bdd3079065f0340434e7cf15598bed1bba5bde42b321f7044682ee9c23acd30ba6212c99ae2cb713", 0x96}, {&(0x7f0000000ac0)="975b6e09145cda8c0e296b136f54d9d39aba8d4e92bbbbd2e6fcacd093692114da37c30ae0529010d705551baf1e6b630dce504d1e2ed785f609c72aaf31384fef0e5f10081acfca7eddd5aad555dea38493354cabd1eb4b216b262a39333558911b60eaa095ceab76de67910aa67c9dca635ff6c3f0e50eb82c0bf4ad01cfcdc76343b55cfebb1e80c121677f0c64e346ae89e65af64b1f7fa9bb8ee8a6288e", 0xa0}, {&(0x7f0000000b80)="fb5bb6570596f7e25a", 0x9}], 0x5, &(0x7f0000000c40)=[{0x90, 0x10e, 0x40, "76e98c6244741f17e82874fb6e63f8116b2f6935e6751c4a504e13bd6a8870a93aaaea063e153a31b71c4a8a78c3690ea0c8bf7ab25e1892cf18efe69fe97e251d6a87f5766fa8ba57fc77ec59c50b03e434bcd8090b3f56105908b2ad1f1093968e1832a04e8149c3f9d6b2f0df813b5a6273d8f3304da14c9d88916b"}, {0x50, 0x1, 0x7, "42dcddcd91ac515de0ff7c90e35efcc0b49004055d8a4b7a9e5e8f763fafbbcabae6a3ed4846ddb0f3e380e25096ba4746b34977f18df35636"}, {0x100, 0x114, 0x4, "2ca5efdc83abbd065f52ffbc5d8eb74cb5b24324645090c0fe4f1bf9ab50ccc2555aae37a0ba115af41ac99abb0c476c65ab97956e1df3269da24364ad643020de736d95e31097af7e7ae77f2be9a25aaafba1f11d34cfa82286fb6584610ffcaa2aa70e47c1f9ee2fdbd6e903729006ba6189840b34a158bf4b5baf5f5f1988bce9d3ff96e9c824f94ddf8b7f79727cb02647ca04660cfef5dca230e7e84f7c7dd6b9b0b0c4605d6062db9958cd80cddd4356cfb5408f4943ed4cbb3bbd07f967d31eb96eb5ece59b1667630544e9fe09673fd90870ad9a1c273ecc05d4116b911486f65fe9f3386310f9"}, {0xd8, 0x8, 0x3, "2798435a4ff7e20f0555ad97f228c78963693b7123aeb60732dcf5554f605ecc65a98716338f18ce3aa56f6382e350455722b80e77c6d462daee47b3863629855ca21618db89ff2779c470c46806a25a7055152e969f79899111677d45de2b3587e85d782abcc2589c41348c6934854bde575a1c29d4639d3067217c60e5e0e55f28e80b51596bdf0a168a906e182aa5e9249e0280a2517580762a696e6df773a8ed6deb141f583533d041e46bf9ed8136fb0de7054662ea5baf679b759c0d5174170b46a1"}, {0xf0, 0x88, 0x0, "8a54acee98505243d6d83de25b0bbf21ba01bcd557cf7343bd3c2d85a4286695dc5fdcc318b0241a8cee0225d9b1924300033228925555804d11b634f8c40a29a762b02aaff2c6a98872b2cff14e23620a654037cc1e740c9707ae6dd8b34b20135c6aaee4a17f09b62dc91caf133ead0b2cfb0f00555476c7455ad09749417d7039a51a07a5cfdf3669ada8ca3ba44addbe5c81bb1d732225479771b97c013bb9ecd39d0fbb4f2112e95c3f84a862e0d518a1acb5ca61751dae8b5c3c45fba1ed2ccc8e93a3e7c788d331b42dd4d3c58ed6090311701586610d30f4a550ee"}], 0x3a8}}], 0x1, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000001040)=0x8060, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r12}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r12}}, 0x18}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200c8000}, 0xc, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002abd7000fddbdf250000000008000100", @ANYRES32=r12, @ANYBLOB="3c000200380001002400010bd5ed046c625f73746174735f726566726573685f696e74657276616c00000000000000c53afa14a861c1b581abfd08000300030000000800040002"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x1) 08:07:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ptrace$pokeuser(0x6, r1, 0xc9, 0x80) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "eaf3b63b4dcea466c0880b"}, 0xc, 0x2) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x1000, @remote, 0x7}}, 0x0, 0x3, 0x0, "bc0a8ce972d490c149edd3eb8e2dca2f1bfffd169175560f8b40ca630f305d512dd42691b48a10c59d4a1ea0aca02336d0af95cab80697f82283c6e7ad49a286636fb5e212192a0d16bed3ab9512c433"}, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000000)={0x3, 0x10ea9ec1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f0000000180)=""/182) r9 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r9, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 571.178019][T17188] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 571.178019][T17188] program syz-executor.1 not setting count and/or reply_len properly 08:07:37 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x4, &(0x7f0000044000)={0x0, 0x12, 0x6, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:37 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, &(0x7f00000000c0)={0x0, 0x0, 0x80, {0x80, 0x0, "ab4d8f6234f601c63ced48493c0220094f0f5adf48c0121948dbfd93824837ca1b0afa54c0e0a50eaf6cb9523f9738ef2e48412fcb253a20f5622286dacefc8a49012258103a4aa375b90c95719fb3433d742f4d15a19853aa440bebdc0d6bf15e4bf70338c39fef96fc66357a32857224cef2b8fdc8c3149a38d71cbf7b"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000480)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x81}, 0x0}, &(0x7f0000000f00)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x5, 0x0) 08:07:37 executing program 3: r0 = socket$kcm(0x11, 0x5, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100636273001c00020004000100"/48], 0x48}}, 0x0) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x30a, 0x0) 08:07:37 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006440)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000006480)) 08:07:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00002e0000002e00f415d22401e24a1abb00b1e1c921ae1a480572d87355ca88bc81000000fbb245cdb0a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 571.632285][ T2855] usb 5-1: new high-speed USB device number 18 using dummy_hcd 08:07:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) r3 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r3, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 571.872269][ T2855] usb 5-1: Using ep0 maxpacket: 16 [ 571.956030][T17222] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 571.956030][T17222] program syz-executor.1 not setting count and/or reply_len properly [ 571.994282][ T2855] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 572.002831][ T2855] usb 5-1: config 0 has no interface number 0 [ 572.009684][ T2855] usb 5-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 572.019072][ T2855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.029096][ T12] usb 6-1: new high-speed USB device number 38 using dummy_hcd 08:07:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) shutdown(r1, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 572.085667][ T2855] usb 5-1: config 0 descriptor?? [ 572.180591][T17227] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 572.180591][T17227] program syz-executor.1 not setting count and/or reply_len properly 08:07:38 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0xf962000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x6, [{0xa, 0x1, 0x77a}, {0x7, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffe01}, {0x9, 0x3, 0xfffffffb}, {0x10, 0x5, 0x8}]}]}, {0x0, [0x30, 0x2e, 0x0, 0x30, 0x30, 0x0, 0x30, 0xd5f5a0572173d596, 0x0]}}, &(0x7f0000000240)=""/144, 0x6b, 0x90, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x8, 0x8, 0x1}) r7 = dup3(r1, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ASHMEM_GET_NAME(r7, 0x81007702, &(0x7f0000000180)=""/184) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 572.332225][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 572.346181][ T2855] input: GTCO_CalComp as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.219/input/input23 08:07:38 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x204000, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x11, 0x5, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000002440)=""/4091, &(0x7f00000000c0)=0xffb) [ 572.472909][ T12] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.485105][ T12] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 572.498381][ T12] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 572.507850][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.550567][ T2855] usb 5-1: USB disconnect, device number 18 [ 572.603767][ T2855] gtco 5-1:0.219: gtco driver disconnected 08:07:38 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0xffff0000) 08:07:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r2, 0x7b5}, 0x14}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000000000507000000000000000080000000", @ANYRES32=r6, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r11}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r11}}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r14 = dup3(r13, r1, 0x100000) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) accept4$packet(r14, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x0}, &(0x7f0000000180)=0x14) r17 = socket(0x10, 0x3, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r20}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$nl_route(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r20}}, 0x18}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r22 = socket(0x10, 0x3, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r25, @ANYBLOB="00000000000000001800a9c8510d17ffe42af0000c00020008000100", @ANYRES32=r25], 0x38}}, 0x0) sendmsg$nl_route(r22, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r25}}, 0x18}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000440)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = dup3(r27, r28, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) accept4$packet(r29, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r33 = dup3(r31, r32, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r33, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r33, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) r35 = socket(0x10, 0x3, 0x0) r36 = socket$netlink(0x10, 0x3, 0x0) r37 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r37, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r37, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r36, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r38}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r38}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r35, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1a99090000000000000000030000000002000000", @ANYRES32=r38], 0x18}}, 0x0) r39 = socket(0x10, 0x3, 0x0) r40 = socket$netlink(0x10, 0x3, 0x0) r41 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r41, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r41, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r40, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r42, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100d0c274130b077b19b98680659af230acdd3836d74bc309b7ec69230a0e461dfddcbbb2f8b49ce45a5d100fca22b5c0a38dd5f35e3582c1f7b2533e9ab28b1c32be497d18a81f0800651ed5b5850087fd91028d5c913f937d8b1d50768b82463da0027fa7953cc58a4dd9fba72152638c", @ANYRES32=r42], 0x38}}, 0x0) sendmsg$nl_route(r39, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r42}}, 0x18}}, 0x0) r43 = socket(0x10, 0x3, 0x0) r44 = socket$netlink(0x10, 0x3, 0x0) r45 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r44, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r46}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r46}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r43, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r46}}, 0x18}}, 0x0) r47 = socket(0x10, 0x3, 0x0) r48 = socket$netlink(0x10, 0x3, 0x0) r49 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r49, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r49, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r48, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r50}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r50}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r47, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r50}}, 0x18}}, 0x0) r51 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r51, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r51, 0x8933, &(0x7f0000001840)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001880)={0x6b4, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff0001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x244f}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0xfc, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}]}}, {{0x8, 0x1, r26}, {0x24c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r30}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x72b34c26}}, {0x8, 0x6, r34}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x21f9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r38}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r42}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r46}}}]}}, {{0x8, 0x1, r50}, {0x134, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r52}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1000, 0x40, 0x6, 0x2}, {0x20, 0x3, 0x3, 0xe5df}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}]}}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x8000}, 0x41040) [ 572.866307][T17243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.958935][T17228] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 572.958935][T17228] program syz-executor.1 not setting count and/or reply_len properly [ 572.983437][T17243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.135941][ T12] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 573.143047][ T12] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 573.150203][ T12] ryos 0003:1E7D:3138.0010: unknown main item tag 0x7 [ 573.157460][ T12] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 573.164519][ T12] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 573.171545][ T12] ryos 0003:1E7D:3138.0010: item fetching failed at offset -627447575 [ 573.180246][ T12] ryos 0003:1E7D:3138.0010: parse failed [ 573.186140][ T12] ryos: probe of 0003:1E7D:3138.0010 failed with error -22 [ 573.337369][ T12] usb 6-1: USB disconnect, device number 38 [ 573.345146][T12560] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 573.592259][T12560] usb 5-1: Using ep0 maxpacket: 16 [ 573.712731][T12560] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 573.721019][T12560] usb 5-1: config 0 has no interface number 0 [ 573.727488][T12560] usb 5-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 573.736673][T12560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.746442][T12560] usb 5-1: config 0 descriptor?? [ 574.004457][T12560] input: GTCO_CalComp as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.219/input/input24 [ 574.018780][T12560] usb 5-1: USB disconnect, device number 19 [ 574.063832][T12560] gtco 5-1:0.219: gtco driver disconnected [ 574.112571][ T50] usb 6-1: new high-speed USB device number 39 using dummy_hcd 08:07:40 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000140), 0x0) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) prctl$PR_SET_UNALIGN(0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000000)) write$UHID_CREATE(r7, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/234, 0xea, 0x8, 0xfff, 0xfffffffe, 0x8001, 0x5}, 0x120) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 574.362525][ T50] usb 6-1: Using ep0 maxpacket: 8 08:07:40 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="63d976", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cea726f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) pause() rt_sigprocmask(0x2, &(0x7f00000000c0)={0x6}, &(0x7f0000000100), 0x8) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1d, 0x0, 0x3, 0xffff, 0x7ff}}, 0x50) 08:07:40 executing program 3: socket$kcm(0x11, 0x8000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000440)=""/4096, &(0x7f0000000000)=0x125b) 08:07:40 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x33, 0x1}, 0x7) recvmmsg(r0, &(0x7f0000001040)=[{{&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000240)}, {&(0x7f0000000640)=""/201, 0xc9}], 0x3, &(0x7f0000000500)=""/4, 0x4}, 0x9b}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000780)=""/137, 0x89}, 0x4}, {{&(0x7f0000000840)=@isdn, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000009c0)=""/47, 0x2f}, {&(0x7f0000000a40)=""/130, 0x82}, {&(0x7f0000000b00)=""/178, 0xb2}], 0x4, &(0x7f0000000c00)=""/55, 0x37}, 0x1}, {{&(0x7f0000000c40)=@x25={0x9, @remote}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/108, 0x6c}], 0x1, &(0x7f0000000d80)=""/202, 0xca}, 0x26d6b793}, {{&(0x7f0000000e80)=@nfc_llcp, 0x80, &(0x7f0000000f00)=[{&(0x7f0000004a00)=""/4106, 0x100a}], 0x1, &(0x7f0000000f40)=""/229, 0xe5}}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000380), 0x1000001, 0x0) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) socket(0x11, 0x802, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000c2b092311aa9b158dd84b0c8c13a329b1b9b764e484d2add55b4fcbc869befec88de93951ca76ebe2907a14dbe07981baa1657ce6b27551a42c4aad4f1305fac48046ad513729b6590951c28386719754a47d137583b16f2f8c699b58198e24cffd7c7bda161b04516070011e4eeb9a9c72f5e509af32fb9e97f58171a7ea2d0baf0a34f25ae04f4d7227b78aacd990cfabbd0ab2b2e76163dff1efe78acf7a67706d8f6546930c901af"], 0xb2, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) write$char_usb(r1, &(0x7f0000001180)="853deb41085b692b4b3fe7e87cbaff586c25df49dd24d65121c7edff6bff7674efec05ee6d1f100c0d82c244cb1d4aac450db30d8d8a12bfdb15aaef87bf425d337450e924ed07b9571514a144150df6e69f4913b73c6a1551a2b00f6bee38bd4bc229691d88612f3ef1d1e7c97f1bf65ddf6949d9b54e41fcda0d588eeb6e", 0x7f) 08:07:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 574.494637][T17267] fuse: Unknown parameter 'cÙv0x0000000000000003' [ 574.514353][ T50] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.526186][ T50] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 574.539516][ T50] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 574.548847][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:07:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00002e0000002e00f415d22401e24a1abb00b1e1c921ae1a480572d87355ca88bc81000000fbb245cdb0a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 08:07:40 executing program 3: r0 = socket$kcm(0x11, 0x8000000000, 0x300) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:40 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) tkill(r0, 0x1000000000013) 08:07:41 executing program 3: setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@int=0x6, 0x4) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x37e899bb38220faf) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r3}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 574.952697][ T50] usbhid 6-1:32.0: can't add hid device: -71 [ 574.959159][ T50] usbhid: probe of 6-1:32.0 failed with error -71 [ 574.992967][ T50] usb 6-1: USB disconnect, device number 39 08:07:41 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x1, 0x2) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000004c0)={r4, 0x3a4}, 0x8) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r6 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r6, 0x1000000) sendfile(r5, r6, 0x0, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000000000)={0x32, 0x6, 0x0, {0x3, 0x2, 0x9, 0x0, 'mime_type'}}, 0x32) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 575.118291][T17294] sctp: [Deprecated]: syz-executor.3 (pid 17294) Use of int in maxseg socket option. [ 575.118291][T17294] Use struct sctp_assoc_value instead 08:07:41 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000001440)=""/4096, &(0x7f0000000040)=0x1179) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r10, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup3(r11, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 08:07:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 575.279270][T17271] fuse: Unknown parameter 'cÙv0x0000000000000003' 08:07:41 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2000000000000000840000000200000000000c020000000000000000473b4a3444c122428e0050bcea02b03600925465db2b1fc03660dab179837135346b4f154ccfd6a34a28714bfa0b7ef99f943a299f652736108a701830f86942e7815194d6582afef09dad7c0efa285b8fef6ffac310928b13547b448afe9ea919b4fcc3b1c6a322e2fd64bd18bd7fe86466becb531c55cd0be9d564f1c16ca237e2e9d58baa7493ce1a3be8116c66c6916b", @ANYRES32=r8], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r8, 0x200, 0x8000}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000480)={r9, 0x8}, 0x8) ftruncate(r2, 0x1000000) r10 = socket$inet_dccp(0x2, 0x6, 0x0) writev(r10, &(0x7f0000000180)=[{&(0x7f0000000000)="9ffec22cf6797cfc5af25135b05871040ad23bec343beeffe9d27e5ea0a7c20e8e8a9889b04b5501b9fd", 0x2a}, {&(0x7f0000000040)="db0519792a24b2005489339f65b231d304ca13e09b86e39b29a1989ab4d53837c711be6054c4f08bee96acad64e584527e74fb5c3f2adf61cd9e26a62bac5e57de6a4fc81f33e53fa3b1fe86339e78cfe1cea62e1c69a71d572cb03ca7f97a1fc182f39e4a44ccd4e6762a778b26b226cddd57f6e7b6ef7ab1c9a440d1f4eede5abed71cc5788ca67060560bd567", 0x8e}, {&(0x7f0000000100)="89a4dfdc8f3a454d39e867aa7d3125c02eae2595f4d196afd8573831c24025518438987a01237c081fa5b366ae1794d6280cb0a0890e880f1047707f8c8e6f6322a077", 0x43}, {&(0x7f0000000200)="9fe9f2854426604276411f39ce9912c968af58e5a884d7c156290673b386c379caca2a35ce83d3366ef2de84bdf058fa00b4dd646fb552b66f7a40c1a513ae82ec54d521b94d24e03e74a1e302911378f16c40724c709fd23a61802389a5d31ca3c687d0d00b269e15c53a908901fa4ba1e4ca4890fc55bda8bf2e4a1dc52321de080f5df37205c25e03475578fbb304884bef155c2451397ee6a437445da8f765af96b6c4cdc02e03cd5758548e761d56d99e1b69a59b5322c98aad636e7b4b95d1511e2e01a12e6e8a66757d17e7ec349b04b3f5", 0xd5}], 0x4) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 575.362699][ T50] usb 6-1: new high-speed USB device number 40 using dummy_hcd 08:07:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000040)={0x2, 0x0, 0xfffffffb, 0x0, 0x5, 0x0, 0x3fe, 0x8c43, 0x0, 0x7, 0x1, 0xffffffff, 0x8, 0x1}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\'', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x807a00, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_pid(r5, &(0x7f00000004c0), 0x12) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc9200050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0) 08:07:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x1, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64=r0]], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x1, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:07:41 executing program 3: socket$kcm(0x11, 0x8000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 575.448107][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 575.469237][T17311] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 575.469237][T17311] program syz-executor.1 not setting count and/or reply_len properly 08:07:41 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x27cb}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 575.623479][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 575.743617][ T50] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.754871][ T50] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 575.768131][ T50] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 575.777549][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.826909][T12560] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 576.072338][T12560] usb 5-1: Using ep0 maxpacket: 8 [ 576.190291][T17333] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 576.190291][T17333] program syz-executor.1 not setting count and/or reply_len properly [ 576.194638][T12560] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 576.228413][T12560] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.239878][T12560] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 576.249272][T12560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.296984][ T50] ryos 0003:1E7D:3138.0011: unknown main item tag 0x0 [ 576.303946][T12560] hub 5-1:118.0: ignoring external hub [ 576.304156][ T50] ryos 0003:1E7D:3138.0011: unknown main item tag 0x0 [ 576.316841][ T50] ryos 0003:1E7D:3138.0011: unknown main item tag 0x7 [ 576.323991][ T50] ryos 0003:1E7D:3138.0011: unknown main item tag 0x0 [ 576.331035][ T50] ryos 0003:1E7D:3138.0011: unknown main item tag 0x0 [ 576.333631][T12560] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 576.339350][ T50] ryos 0003:1E7D:3138.0011: item fetching failed at offset -628941079 [ 576.353282][ T50] ryos 0003:1E7D:3138.0011: parse failed [ 576.359121][ T50] ryos: probe of 0003:1E7D:3138.0011 failed with error -22 [ 576.503717][ T50] usb 6-1: USB disconnect, device number 40 [ 576.942361][T17318] usb 5-1: reset high-speed USB device number 20 using dummy_hcd 08:07:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00002e0000002e00f415d22401e24a1abb00b1e1c921ae1a480572d87355ca88bc81000000fbb245cdb0a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 08:07:43 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ftruncate(r4, 0x2) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:43 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0xfffffffffffffeee) 08:07:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000040)=0x9) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r2, 0x0) getsockopt$sock_int(r0, 0x1, 0x28, 0x0, &(0x7f00000000c0)=0x97) 08:07:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x1e, "f089250b39d6c473b7077af9cc35adab619baaf04f3cf369c0d71852eefe"}, &(0x7f0000000140)=0x26) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r8}, &(0x7f00000002c0)=0x8) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x4) [ 577.098190][T17348] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 577.098190][T17348] program syz-executor.1 not setting count and/or reply_len properly 08:07:43 executing program 0: r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000040)={0x3000, 0x676a78ffb40c91ed, 0xa8, 0x56, 0x5}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCGETS2(r8, 0x802c542a, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 577.192282][T17318] usb 5-1: Using ep0 maxpacket: 16 08:07:43 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xfa800, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0xe001, 0x7f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f00000000c0)={0x219d, 0x3, 'client1\x00', 0x5, "a537722fb810cd93", "63694b13a6abf1cb2faf3e783154a3df056f65b5bea156c463808d1704fe8d30", 0x200, 0x401}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f0000000200)=0x3) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 577.233274][T17318] usb 5-1: device firmware changed [ 577.250902][T17318] cdc_wdm 5-1:118.0: Error autopm - -16 [ 577.259251][T12560] usb 5-1: USB disconnect, device number 20 08:07:43 executing program 2: r0 = socket$inet6(0xa, 0x400000004805, 0x8) ioctl(r0, 0x801000008912, &(0x7f0000000340)="0a5c2d023c126285718070") socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) bind$inet(r1, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r1, 0x1, 0xd, &(0x7f0000000100)=0x8, 0x4) prctl$PR_SET_FP_MODE(0x2d, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000380)=""/127, &(0x7f0000000140)=0x7f) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="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", 0x132, 0x4007ffd, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x5, 0x0) memfd_create(&(0x7f0000000080)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 577.383229][ T12] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 577.472986][T12560] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 577.652337][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 577.722264][T12560] usb 5-1: Using ep0 maxpacket: 16 [ 577.772588][ T12] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.784434][ T12] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 577.797983][ T12] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 577.807994][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.892590][T12560] usb 5-1: config index 0 descriptor too short (expected 58986, got 36) [ 577.901607][T12560] usb 5-1: config 161 has too many interfaces: 201, using maximum allowed: 32 [ 577.910833][T12560] usb 5-1: config 161 has 1 interface, different from the descriptor's value: 201 [ 577.920401][T12560] usb 5-1: config 161 has no interface number 0 [ 577.927039][T12560] usb 5-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9 [ 577.937105][T12560] usb 5-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24 [ 577.948434][T12560] usb 5-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.00 [ 577.957703][T12560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.232575][T12560] usb 5-1: usb_control_msg returned -71 [ 578.238472][T12560] usbtmc 5-1:161.8: can't read capabilities [ 578.252839][T12560] usb 5-1: USB disconnect, device number 21 [ 578.295428][ T12] ryos 0003:1E7D:3138.0012: unknown main item tag 0x0 [ 578.303178][ T12] ryos 0003:1E7D:3138.0012: unknown main item tag 0x0 [ 578.310297][ T12] ryos 0003:1E7D:3138.0012: unknown main item tag 0x7 [ 578.317527][ T12] ryos 0003:1E7D:3138.0012: unknown main item tag 0x0 [ 578.324676][ T12] ryos 0003:1E7D:3138.0012: unknown main item tag 0x0 [ 578.331735][ T12] ryos 0003:1E7D:3138.0012: item fetching failed at offset -627448855 [ 578.340696][ T12] ryos 0003:1E7D:3138.0012: parse failed [ 578.346753][ T12] ryos: probe of 0003:1E7D:3138.0012 failed with error -22 [ 578.501265][ T50] usb 6-1: USB disconnect, device number 41 [ 579.002338][ T50] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 579.242305][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 579.362423][ T50] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 579.373138][ T50] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.384909][ T50] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 579.394274][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.443925][ T50] hub 5-1:118.0: ignoring external hub [ 579.453501][ T50] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device 08:07:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb3, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0xb0825f5bd7ca1b7b, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x40000, 0xfffffffc, 0x10000, [], &(0x7f0000000040)={0x980906, 0x101, [], @value64=0x200}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x46, {0x46, 0x0, "a9bb1c505c52e7294e3951b67f16f0cf682cf64db21f05de030ab2cfb7da7eab9c78fc085fea35740f865785e6620f478cfe47809f8ae8c7e5b623089a72f6b4468c5c2d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 08:07:49 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x5, &(0x7f0000000000)={0x0, 0x15, 0x2, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{r3, r4+10000000}, {0x0, 0x9}}, 0x0) io_setup(0x4, &(0x7f0000000080)) tkill(r0, 0x1000000000013) syz_open_dev$char_usb(0xc, 0xb4, 0x4040) 08:07:49 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x2002) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000100)={0xe, @sliced={0x401, [0x400, 0x3, 0x45c, 0xffff, 0xffff, 0xfe01, 0x6, 0x8, 0x5, 0x8, 0x1, 0x0, 0x6, 0x6, 0x7fff, 0x8, 0x80, 0x81, 0x9, 0x6, 0x3, 0x5, 0xa2cc, 0xb8a8, 0x1ff, 0xba43, 0x8000, 0x8001, 0xfff, 0x400, 0x2c55, 0x9, 0x3, 0x9, 0x9, 0x9, 0x8, 0x1, 0x8, 0x8, 0x192, 0x9, 0xfffd, 0x0, 0x9, 0x4, 0x8, 0xab58], 0x1f}}) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x5, 0xfffffffd, {0x51, 0x1, 0x4, {0x3ca3, 0xc2}, {0xffb}, @ramp={0x0, 0xc3ec, {0xe810, 0x40, 0x80, 0x20}}}, {0x57, 0x1, 0x3, {0x6, 0x1}, {0x1ff, 0x800}, @const={0x1, {0x4, 0x3, 0x6, 0x6}}}}) 08:07:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000400)={0x1ab, 0x5}) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x401}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8080001}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0xe8, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1b}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x480488a0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:49 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00002e0000002e00f415d22401e24a1abb00b1e1c921ae1a480572d87355ca88bc81000000fbb245cdb0a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 08:07:49 executing program 4: r0 = open(0x0, 0x0, 0x36) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xff1cf9486afc283e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000080)={0xf}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000040)={0x0, {0x0, 0x1}}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), 0x4) getuid() r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000080)={0xf, 0x100000000}) ioctl$EVIOCGABS3F(r4, 0x8018457f, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e20, 0x1ff, @remote, 0x3}], 0xd0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)={0x0, 0x6, 0x9, &(0x7f00000000c0)=0x800}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) getpeername$packet(r5, &(0x7f00000001c0), &(0x7f0000000200)=0x14) [ 583.735232][T17318] cdc_wdm 5-1:118.0: Error autopm - -16 [ 583.742974][T12560] usb 5-1: USB disconnect, device number 22 [ 583.849538][T17383] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 583.849538][T17383] program syz-executor.1 not setting count and/or reply_len properly 08:07:50 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3c, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0xc074510c, &(0x7f0000a07fff)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000001700)=""/41, &(0x7f0000001740)=0x29) r8 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x200800, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r9, 0xc0186419, &(0x7f0000001600)={0x7, &(0x7f0000000040)=""/247, &(0x7f0000001540)=[{0x4, 0xf4, 0x4, &(0x7f00000001c0)=""/244}, {0x0, 0xfa, 0x2, &(0x7f00000002c0)=""/250}, {0x80, 0x1000, 0x10001, &(0x7f00000003c0)=""/4096}, {0x1000, 0xae, 0x126, &(0x7f00000013c0)=""/174}, {0x9, 0xc, 0x2000, &(0x7f0000001480)=""/12}, {0x5, 0x0, 0x7ff, 0x0}, {0x3ff, 0x13, 0x6, &(0x7f0000001500)=""/19}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000001640)={0x5, 0x0, 0x4, {}, 0xd9f9, 0xfffffffe}) getsockopt$inet_tcp_int(r8, 0x6, 0x6, &(0x7f0000000180), &(0x7f00000016c0)=0x4) accept$unix(r9, &(0x7f0000000100), &(0x7f0000000040)=0x6e) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000014c0)=ANY=[@ANYBLOB="f172d16143e0c22102", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) 08:07:50 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x40001) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x254040) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0xa, 0x4f9efc323393f18, 0x80) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) sendmsg$kcm(r3, &(0x7f00000014c0)={&(0x7f0000000140)=@ll={0x11, 0x7, r7, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001440)=[{&(0x7f00000000c0)="6cc1e044ea04137596171decc5309bf8b7b8949e2d79e5a25488ce", 0x1b}, {&(0x7f00000001c0)="58dc82d36bda187470079a43b8bd9ea6839f0f72b2fd2ebdacd0c6e9f8ddff7477e47bf752f4101eebc456c2e50655d05ec4d0974a8246850c8495f09a693becb9cf6fb66a95f48cd69ec032fad9349f1c6c46181f097aa6a24ed3f7c1017c84d6b2e4f1aec273f08d9093f5af41529d9aa96899fe722f4169f03e8f35aac3c6cff7d672b475706e002f5f4fa36fbfc541e50ef1c24482e94b801b2482b97851b71b1a0220d72d52d6eaf998f9a1d7dc5a389368a2f91b4fa39eac76b279021d9ddfc7a84ffbe9ba14af", 0xca}, {&(0x7f00000002c0)="6b0c01f2680714687c033bff9d138a28eaf6b833e8383b1c167a8de936f9aaec8e070fd2c6855b96ec21f9e2d2cf193d7e5acf9f828d44be9fe39b63b188a3ff814c43303f853ab6c2d194db72e1095c4df4195a40a193c32e1bd1d8d39b2b1dbdcce7195b2086755c33b0a9061e8ea170f8f3fc2c852908155db78c546a529905ebfbd8d26ddfa8d9fa31ca57d4c4397cd815d6d0e8187021", 0x99}, {&(0x7f0000000380)="89018be551312255bb2e208b0e1f2ab922925810d5e237748927c7d1ba86e8d9ac3fca24833d3f438a6d8ed4d35fc3890e2e07a22edb03a798e25d72eada59570c3ade1856f17b42677748ad3b2133d12b6ac8f8f1a3034e58cdecf8371110b8ee9ce308f650a1704344c06f87202799914239a649dfb09e8b10d8d36d577c554e13b19de363e5f68e31afcb", 0x8c}], 0x4, &(0x7f0000001480)}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)={r2}) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 584.112828][ T12] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 584.120870][ T2855] usb 6-1: new high-speed USB device number 42 using dummy_hcd 08:07:50 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400400, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) 08:07:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x5}, 0x28, 0x2) syz_open_procfs(0x0, 0x0) pipe2(&(0x7f0000000080), 0x84000) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket(0x80000000000000a, 0x2, 0x0) dup2(0xffffffffffffffff, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0xffffffff, @loopback, 0xffffffff}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000000140), 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) [ 584.352450][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 584.362866][ T2855] usb 6-1: Using ep0 maxpacket: 8 08:07:50 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@empty, 0x71, r2}) [ 584.473213][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.484614][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.498791][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.40 [ 584.509270][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.518387][ T2855] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.529689][ T2855] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 584.542830][ T2855] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 584.552238][ T2855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.564509][ T12] usb 3-1: config 0 descriptor?? [ 584.616353][T17418] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 584.616353][T17418] program syz-executor.1 not setting count and/or reply_len properly 08:07:50 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x8000000) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000001440)=""/4096) r6 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285628, &(0x7f00000000c0)={0x0, 0x6, 0x7f, [], &(0x7f0000000080)=0xf7}) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x12e3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BLKBSZGET(r9, 0x80081270, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x12000, 0x0) [ 585.046027][ T2855] ryos 0003:1E7D:3138.0013: unknown main item tag 0x0 [ 585.053270][ T2855] ryos 0003:1E7D:3138.0013: unknown main item tag 0x0 [ 585.060376][ T2855] ryos 0003:1E7D:3138.0013: unknown main item tag 0x7 [ 585.067702][ T2855] ryos 0003:1E7D:3138.0013: unknown main item tag 0x0 [ 585.074794][ T2855] ryos 0003:1E7D:3138.0013: unknown main item tag 0x0 [ 585.081816][ T2855] ryos 0003:1E7D:3138.0013: item fetching failed at offset -627447127 [ 585.090901][ T2855] ryos 0003:1E7D:3138.0013: parse failed [ 585.096749][ T2855] ryos: probe of 0003:1E7D:3138.0013 failed with error -22 [ 585.111183][ T12] wacom 0003:056A:00B3.0014: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 585.122716][ T12] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B3.0014/input/input25 [ 585.142737][ T12] wacom 0003:056A:00B3.0014: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.2-1/input0 [ 585.264308][T12833] usb 6-1: USB disconnect, device number 42 [ 585.273935][ T50] usb 3-1: USB disconnect, device number 61 [ 586.042419][ T50] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 586.282230][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 586.402430][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.413879][ T50] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.427085][ T50] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.40 [ 586.436324][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.446022][ T50] usb 3-1: config 0 descriptor?? [ 586.748061][ T50] wacom 0003:056A:00B3.0015: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 586.759414][ T50] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B3.0015/input/input28 [ 586.782505][ T50] wacom 0003:056A:00B3.0015: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.2-1/input0 08:07:52 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d35d0f08cb04250131cc000000011b000000000000000009042e0000bc150700"], 0x0) [ 586.833685][ T12] usb 3-1: USB disconnect, device number 62 08:07:52 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x2, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040)="02998ee5798b0f81e32cc8c135652e82485e026c4018699ecd292ff15bc1299e510a10f633585dc36b6e8d32d9c62189da734372c61e5ed210f7dc7090c45772ba2639ff5c76dac35b8cace6546bed022f07aa888f407988f6e44573765c1e8d6f1f0ed49855", &(0x7f00000000c0)}}, &(0x7f0000000000)) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:07:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x50, r3, 0x8000000) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:52 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x0, 0x2, 0x3, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="6b51f1bac8dbffc52590d59bf829cf840ec638bf4a4a2896083255334f9ada1d0f5962a27c0f56f01c9ac08da0935b961543", 0x32}, {&(0x7f0000000140)="fb92e4f76d89a3f0c1131fde41b368947918f4a6f557ff08a0c0bdc37d74b516a33ee275464934d324beff2a8fa9e75b75cc7792165cef8c63b2b300dcf58c888b56c6f733b6c402430f09e3a07a36b2bee25505a4fa7859d634c1f076b71c6caab2a1952c0596e6f37286f69bd5b71364a21875d89b1cb929e0c20af57e7d0d646f447733da71b604fba74deac3054357dcd920170c90fc263c8d733cd0d0484797ed902fc0a7b37316ede63361b99f23479f4284cd5f05a0398a", 0xbb}, {&(0x7f0000000200)="76d8646eb03b8633e8c82a5726418d9efc45b46e9fa31b93037827eb679e0e202fada827e897792dc703ca50bb42762615b9d168175132a6dbbd413c42493da953697e3682f351912cdd5f9e683838c0d65c531860b153b479fcd4c28c6ebf07cb98e217d8a6c84c2c9fd6789ad16a9498a513ce0a30fdf67c93a6b2364d5ae1bbd70dc741", 0x85}, {&(0x7f00000002c0)="ddb931706fb89b267c07d2a3b543c212685efc3c7796abe18a29e3102fd47c2c6eb538567d956a996cd3109a21f1c30d5cf83de58a07ce9e941c39a2369505ca0b397478e0557846c7c38cef994154d42845ce62b6ff2d727c301b22e6e9e9", 0x5f}], 0x4}, 0x800) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x80000001) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x7, 0x64480) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000140)=0x100000000007) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffe9a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:07:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 587.032728][T17453] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 587.032728][T17453] program syz-executor.1 not setting count and/or reply_len properly 08:07:53 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0xf, {0xf}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x0, 0x83, {0x83, 0x0, "b24aa67be06392dec5ec2f69d14c0a0dc2760482eef164105b1bf2b7c520b255b46b463f23edcaea567e9a16183e7094d5ef0a11614603f866fea4c5b27c20d604248b2e7af1bcc34c6ad8aa3681ae7e1108283b1db6b33555b8334846248ea81b7da87e439d6de347f215b0c99fd9756e4c0de3270d5ecd9d94ad5c785dc01a57"}}, 0x0}, 0x0) 08:07:53 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6b, &(0x7f0000000440)=""/4085, &(0x7f0000000040)=0xff5) [ 587.272435][ T50] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 587.332300][ T12] usb 3-1: new high-speed USB device number 63 using dummy_hcd 08:07:53 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f0000000600)={r0, r1+10000000}, 0x0) socket$kcm(0x11, 0x8000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e1f, @loopback}}, [0x4, 0xfffffffffffffffc, 0x7bf5, 0xfc79, 0xfffffffffffffffd, 0x4468, 0x600000000, 0x8, 0x9, 0x2, 0x5, 0x3, 0x7ff, 0x10000000002, 0x8]}, &(0x7f0000000240)=0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_nanosleep(0x6, 0x0, &(0x7f0000003b00), 0x0) dup3(r9, r10, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000003b40)={'icmp\x00'}, &(0x7f0000003b80)=0x1e) r11 = clone3(&(0x7f0000003a40)={0x10000000, &(0x7f0000000400), &(0x7f00000019c0), &(0x7f0000001a00), 0x34, 0x0, &(0x7f0000001a40)=""/4096, 0x1000, &(0x7f0000002a40)=""/4096}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r12, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r14, 0x84, 0x1c, &(0x7f0000003bc0), &(0x7f0000003c00)=0x4) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r15, 0x0) r16 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000000500)='em0cpus1\x95\xeb\xe6\xa2\xa5\x12\xb7V\xda\x8eo\x9ce\x0e\x8a\x9e\xc6!\xae\xe8\xf9I\xe4e\xb2q\xb9\xd9c\xc1n\xddg\xf17\xbf\xac\x19\xf8\xb0\x84\xad4\xc4\xa27\xe0\xdf\xfd\xf1\x98\xdb\x19\x97\x89\x9f\xf6Rr\xde7\xcb\xed&0\xa4\xb4):\x15\x8a\x91@<\x00\xbb\xbfm\xc8H\x95\xbb\xdea\x96Q\xef\x8a\x01\xf0<_\xfb\xb0\x98\xbc\x81#.\xc9\x93\xf1m\x91\xc5P\xe834\xcd\x14\x01\xe9K\x16\xde\x87I\xbf\x0f\xeb\xbe\xb4\x914\xa7>\xac\x16\x01\x9a\xe98]\xb1\xd4 \xcb\\\x1e1\xc3\xc91[,2w\xa2\xfa\x04<\xd0\xea\xe4\xb4', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r16, 0x0, r17) sendmsg$unix(r10, &(0x7f0000003ac0)={&(0x7f0000000380)=@file={0x6408f98dd0fbedc0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001440)="04b56117f98499a30b238c91f7bd7fd6221229fc431b0c8b28f76f7488bb1d5aa896decdf3aa5d1c8d894071706760303ad27f4295e8c7aa1024acf5bfa703561b7a8c645acadecf05cbd9304c339d646df07d2ad6541e27cafd7349e38f13d77d6481413286441aec0a3a9c9b5a5ecfcb8cd900052fd6f7a89e6411bacf513e53bd1572455d05e71a037009078d2121b74375c502a56eed5baa52fae21c24baa7d2d1c2f0f61ec379f8dc4af0e08515a22fcdefde2cb792201595294b70df615c", 0xc1}, {&(0x7f0000001540)="45683fa93d72e373db6a25e131d9531c8963213b566979ae0072b7f106005530e1f243a3e0f75201da72be115db1b1f3933ec2a048b994542d1e0ca5ed1a8be589bfccda305524f70fd839875f24203b05f61c2f294c35b13890d0edb109cf268413ee6840fa70d130128704adb85b3467a1f75bba3e925f8627125f23e48befb5a3d85e6a3a719b4cee286cc358546ffcb790b54ebbddd4d7dab309a734b192eff0b3caafc892bd852b2125b6d64aba32f0e4cf44d3ff3553fe1636bf0e109acd018f89f8ff6b220b0a5911d10fc97b27dd62cbbceb", 0xd6}, {&(0x7f0000001640)="db97766c6897b61ef1c102242653d50f9751c0d0044b48ad83ebe7ff34eb77d3f150ea003286de6cbc014ce31ec34613fe5fefb088281bb0fa3c35973539e05e82d7bd367311e0f328b5e10fc822cb2bfde0d3d6b75f0ac262872550fe443dcef62e06f19480b6c0adecbaaac33133630ca7f517323520e14d79c1268432425469a9c82993eb60010290d42e3259d8f29edf2be1656b", 0x96}, {&(0x7f0000001700)="2433ff89fb7b11ef20bf53182dc91abb1416306596cc907bf93cb2fa3720e0033122d52773fb84a0af2c2225704df4955b9cd9db4cd49257b1d61bd030f4adfc7cdbc21f3c1b78a285c9bb95a43e64900d725884456f9cb42f51093e51a583", 0x5f}, {&(0x7f0000001780)="ada5f52bca0e60748c5d73234506ac6797951c21f934400466ea926d0a3d188c0097703665236ecf2551467dcff19ed8f23ad186d131c01c76d9338c0e43b4a9ea472f7e16643cb2adc6fa6e79b6e25638083f406e80a48f00ac3914856115108c62c305e750b888a6a7795001e126001d2d49351d530bd135be835fe277400dd040ec7ca3436d0354b9097b8821f6b6330af80dad7a4adba17caf75c4233de7", 0xa0}, {&(0x7f0000001840)="594aaa90e52b36954d395403052b518ad5eed0017e70040cc007dd5b5dcfc4bac3eb9c21e6563ddfc1dfacde6277f91f82d3be280e504360764411c484e80e8c8564624462dfebf7b5089b64bcd632f06d2d00a7328217c90bdf5bebc8b1ebe4cb97ae145236942d07495cf417da1e41411af27a24cde0cd70dad6bcfb22746af3fbad3ee739187c825ebd07c8549355f561864825a56f0b786eb3c0e2abf26f2585e8687f2b8773008d9dccaca9566a3b896f760dc27642224bdc819e420dced61c05f710f79762580547643936df38d29c3910888df1f026d3edc9253408a4", 0xe0}], 0x6, &(0x7f0000003a80)=[@cred={{0x1c, 0x1, 0x2, {r11, r15, r17}}}], 0x20, 0x20000814}, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e20, 0x214, @loopback, 0x582}}, 0x4, 0x2, 0x6, 0x1, 0x3c}, &(0x7f0000000340)=0x98) r18 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) close(r18) r19 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_buf(r19, 0x1, 0x3d, &(0x7f0000003c40)=""/4082, &(0x7f0000000040)=0xff2) socket$netlink(0x10, 0x3, 0x16) [ 587.412341][ T2855] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 587.522480][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 587.572676][ T12] usb 3-1: Using ep0 maxpacket: 8 08:07:53 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) r5 = dup(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000000)={0x8, 0x3, 0x7ff, 0x9, 'syz0\x00', 0x10000}) [ 587.652770][ T2855] usb 5-1: Using ep0 maxpacket: 16 [ 587.654215][ T50] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.669628][ T50] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 587.682858][ T50] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 587.692278][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.732991][ T12] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 587.740888][ T12] usb 3-1: can't read configurations, error -61 08:07:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/gq\x9d\xdc\x83\xdc\xd0\xcc', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 587.782851][ T2855] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 587.791321][ T2855] usb 5-1: config 0 has no interface number 0 [ 587.798015][ T2855] usb 5-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 587.807383][ T2855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.819305][ T2855] usb 5-1: config 0 descriptor?? 08:07:53 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xffffffffffffff80, 0xa0d80) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x0) ioctl$TIOCCONS(r1, 0x541d) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020909090c00000027bd7000ffdbdf2505001a00fe800000bbac1e1f000000000000000000000000000a000c0405001a00ac1414aa000000c93c1a1575c91c94ed0000000000000000000726630532171ea239d272"], 0x60}}, 0x0) r2 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r2, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 587.892716][ T12] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 588.132779][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 588.252545][ T50] usbhid 6-1:32.0: can't add hid device: -71 [ 588.259019][ T50] usbhid: probe of 6-1:32.0 failed with error -71 [ 588.273808][ T50] usb 6-1: USB disconnect, device number 43 [ 588.292565][ T12] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 588.300464][ T12] usb 3-1: can't read configurations, error -61 [ 588.307481][ T2855] gtco 5-1:0.219: Collection level already at zero [ 588.315608][ T2855] input: GTCO_CalComp as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.219/input/input31 [ 588.326622][ T12] usb usb3-port1: attempt power cycle [ 588.509970][ T50] usb 5-1: USB disconnect, device number 23 [ 588.554104][ T50] gtco 5-1:0.219: gtco driver disconnected [ 589.042421][ T12] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 589.282360][ T50] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 589.283789][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 589.452477][ T12] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 589.460294][ T12] usb 3-1: can't read configurations, error -61 [ 589.522279][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 589.622352][ T12] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 589.652541][ T50] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 589.660969][ T50] usb 5-1: config 0 has no interface number 0 [ 589.667554][ T50] usb 5-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 589.676880][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.686735][ T50] usb 5-1: config 0 descriptor?? 08:07:55 executing program 2: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x208480, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x1, 0x875, &(0x7f0000000140)="f33532e8f4cde25628c4628339b081b0c1e8e9f26086c64d4058f7fc5b656ba3fbbb5b36cc9c4d134290c48180fd191398f9ff0f86fc7679a0cd50f92da06b57440aae464bf5a22ff93df36508e41e9270e40298f024d9949d7d5ff163131e300e04b326e1ac497cc25aff93712179dbc71039413c4017f9b59f61aeb6c19007a41069fdf5c9288c1c845e667f8d1d2b58c0f1fc45", &(0x7f0000000200)="1bf53c6363df10d985fba81e76ddf8f6fe32848e5a0112bddfedfd6015c71dc4179efe8c10df2759a1892553cc110c32922adfd873a68f3e2344abe21804aa208c4384595984a115aaeaaceb8d900b141fc0afdab14d4691f1dbe73768b981e7168f98b22e49c0bee070057446eaf2caa1bd2741d2f9d1ece92b", 0x95, 0x7a}) [ 589.862491][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 589.962576][ T12] usb 3-1: device descriptor read/all, error -71 [ 589.969536][ T12] usb usb3-port1: unable to enumerate USB device [ 590.002711][ T50] gtco 5-1:0.219: Collection level already at zero [ 590.010570][ T50] input: GTCO_CalComp as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.219/input/input32 08:07:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x2, 0xd) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:56 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{0x8}, {0x1, 0x31}, 0xb7, 0x0, 0xb0}) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x10) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000001440)=""/4101, &(0x7f0000000000)=0x1005) 08:07:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 08:07:56 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) tee(r3, r4, 0x6, 0x5) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r9}) bind(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r10, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) [ 590.122500][T17502] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 590.122500][T17502] program syz-executor.1 not setting count and/or reply_len properly 08:07:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) r2 = open(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_open_dev$hiddev(&(0x7f0000000140)='/dev/usb/hiddev#\x00', 0x8, 0x10000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) fcntl$dupfd(r0, 0x203, r8) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) read$rfkill(r2, &(0x7f0000000100), 0x8) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 590.207623][T12833] usb 5-1: USB disconnect, device number 24 [ 590.266021][T12833] gtco 5-1:0.219: gtco driver disconnected 08:07:56 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x400, 'syz1\x00'}) 08:07:56 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000440)={{0x2, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x55, [0x6, 0xff, 0x8000, 0x14, 0x1d, 0x3, 0x40, 0x1, 0x1, 0x68, 0x40, 0x6, 0x80, 0x0, 0x9, 0x6, 0x8, 0x7571, 0x11eb, 0xffffffff, 0x9, 0x8000, 0x9, 0x70c20bb1, 0x8, 0x3, 0x9, 0x183c, 0x7, 0xff, 0x4, 0x7df, 0xec31, 0x55, 0x5, 0xff, 0x4, 0x401, 0x64, 0x100, 0xe0d2, 0x6, 0x800, 0x6, 0x5, 0x6, 0x7ff, 0x1ff, 0x10001, 0x7fffffff, 0x0, 0x7fff, 0x4, 0x9, 0x7fff, 0x0, 0x4, 0x4, 0xfffffff9, 0x3f, 0xaf, 0x400, 0x7, 0x3, 0x9, 0x7, 0x7, 0x3ca5, 0x8, 0xb7d, 0x7fff, 0x9, 0x9, 0x1, 0x3, 0xfffffffd, 0x4, 0x20, 0x1, 0x5f22, 0x7ff, 0x6, 0x875e, 0x2, 0x3f, 0x3, 0x9, 0x401, 0x1, 0x7fffffff, 0x930, 0x2, 0x54, 0x800, 0xfffffffe, 0x80000001, 0x80000000, 0x55d7bd71, 0x9, 0x99f, 0x364b2721, 0x3, 0x5, 0x800, 0x8001, 0xc71, 0x101, 0x0, 0x4f, 0xffffffff, 0x8, 0x6, 0x2, 0x7fffffff, 0x8, 0xa3ff, 0x0, 0xfff, 0x9, 0x0, 0x0, 0x40, 0x43, 0x3, 0x2, 0x0, 0x7, 0x2655, 0x5, 0x5, 0x80000001, 0x0, 0x5, 0x1e, 0x7, 0x6ae0, 0x4, 0x73d, 0x3ff, 0x7, 0x0, 0x4, 0x8001, 0x9, 0x9, 0x8001, 0x80, 0x800, 0x89ed, 0xffff, 0x0, 0x7, 0x49b, 0x1, 0x2, 0x9, 0x81d, 0x3f, 0x7, 0x80000000, 0x2, 0xffff, 0x2, 0x6, 0x0, 0x9, 0x6d, 0xfffff000, 0x80000000, 0x0, 0x2, 0x4, 0x3, 0x8c4, 0x9, 0x0, 0x4, 0x7c3e8d47, 0x662, 0x4, 0x3, 0x2, 0x0, 0x81, 0xfffffff9, 0x3, 0x101, 0x8000, 0x6e2, 0x7, 0xff, 0xfff, 0x1, 0xffffffff, 0x6, 0x2, 0x101, 0x9, 0x101, 0x0, 0x10000, 0x8000, 0x1, 0x7, 0x3, 0x0, 0x6, 0x7, 0xf87, 0x401, 0xf53, 0x7, 0x0, 0xffffff80, 0x4, 0xbcb, 0x4caad79c, 0x1c, 0x0, 0x5, 0xdb73, 0x9b58, 0x5, 0x2, 0x1, 0xff, 0x92, 0x0, 0xbf2c, 0xfffffff7, 0xff800000, 0x4, 0x9, 0x9, 0xfff, 0x7ff, 0x27, 0x0, 0x0, 0x3, 0x7, 0x3, 0xef9e, 0x2, 0x101, 0x8, 0x5, 0x10001, 0x3, 0x2, 0xff, 0x80000001, 0x2, 0x0, 0x44, 0x1, 0x100, 0x10001, 0x8000, 0x3, 0x7fff, 0x3, 0x40, 0x9, 0x9, 0x40, 0x5e, 0xff, 0x8, 0x5, 0x8, 0x92, 0x7, 0x390, 0x3, 0x81, 0x401, 0x3ff, 0x1, 0x7f, 0xc00000, 0x4, 0x3f, 0x0, 0xad7c, 0x3, 0x0, 0xf7, 0xfffffff8, 0x8, 0x2, 0x2, 0x8, 0x0, 0x0, 0xfff, 0x83e, 0x8001, 0x36, 0x1000, 0x6, 0x401, 0x7f, 0x0, 0x80, 0x2, 0x10000, 0x3, 0x501, 0x80000001, 0x0, 0x7, 0xc92b, 0x1, 0xfff, 0xb0, 0xff, 0xfe, 0x1, 0x0, 0xfffffff0, 0x7, 0x9, 0x0, 0x41, 0x1ff, 0x9, 0x0, 0xb8, 0xe80, 0x4, 0x400, 0xb73, 0x3, 0x200, 0x8, 0x7, 0x100, 0x7ff, 0x200, 0x33, 0x7f, 0xffff, 0x0, 0x5, 0x0, 0x7fffffff, 0x4, 0x10000, 0xbea, 0x64, 0xe088, 0x7f, 0x1, 0x9e2, 0x7fffffff, 0x9, 0x4, 0xffe00, 0x4, 0x10001, 0x2, 0x9, 0xfffffffd, 0x40, 0x2, 0x4, 0x20, 0x6, 0x2, 0x9, 0x4, 0x2, 0x7, 0x4, 0x2, 0x1, 0x5, 0x400, 0x1, 0x10001, 0x2, 0x3, 0x400, 0xfffffff7, 0x4, 0x2800, 0x6, 0x4, 0x9, 0xab60, 0x1, 0x0, 0xd78d, 0x5, 0x4, 0x8, 0x100, 0x7fffffff, 0x4, 0x9000, 0xaeb, 0x4, 0xda, 0x400, 0x10000, 0x7, 0xfffffffb, 0xbf22, 0x6, 0x8, 0x8, 0x8, 0x0, 0xff, 0x672, 0x7ff, 0xc6, 0x1f5, 0x9, 0x401, 0xb7, 0x8, 0xfff, 0x1, 0x1, 0x8, 0x0, 0x1, 0x80b, 0xb00, 0x0, 0x7, 0xfff, 0x2, 0x1, 0x80, 0x6, 0x3ff, 0xffffffff, 0x8, 0x9, 0x1, 0x2, 0x80000000, 0x4, 0x8, 0x3, 0x6, 0x800, 0x8, 0x9, 0x0, 0x4, 0x0, 0x8001, 0x9, 0xd5, 0x3, 0x1, 0x40, 0x81, 0x9, 0x8000, 0x40, 0xcd96, 0x101, 0x0, 0x400000, 0x8f6f, 0x5, 0x3, 0x80, 0x7, 0x0, 0x9357, 0x1, 0xd8c, 0x101, 0x80, 0x3737, 0x8, 0x5, 0x3, 0xfffffc00, 0x8001, 0x9, 0x6ac4, 0x1, 0x40, 0x200, 0x9b, 0x4, 0x4, 0x9, 0xff, 0x0, 0x7, 0x1c0000, 0xffffffff, 0x2, 0x2, 0x81, 0x3, 0x6, 0x81, 0x4, 0xfffffffb, 0x0, 0x3ff, 0x10000, 0x3, 0x0, 0x2, 0x5, 0x3e4fb292, 0x2, 0x65b, 0xffffffff, 0xffff, 0xffffffff, 0x8, 0x5, 0x6, 0x80, 0xff, 0xfffffbff, 0x200, 0x278, 0xd828, 0x401, 0x81, 0x4, 0x4a70, 0xfffffff8, 0x3, 0xb99, 0x6, 0x56, 0x1, 0x4, 0x3f, 0x9, 0x2, 0x1, 0xfbb3, 0x8, 0xaca, 0x10001, 0x1, 0x1ff, 0x33d62b90, 0x81, 0x8, 0x8e, 0xfffffe57, 0xd8, 0x2, 0x6, 0x7ff, 0xffffff7f, 0xa21, 0x401, 0x0, 0xfffffffc, 0x7fff, 0x20, 0x2, 0x8, 0x7, 0x4, 0xaa, 0xffffffc0, 0xffffffff, 0xfffffff8, 0x5, 0x2, 0x4, 0x5, 0x1ff, 0x7fff, 0x5, 0x5, 0xd20, 0x3, 0xbd, 0x3, 0x80000000, 0x7, 0xfffffe01, 0x7, 0x9, 0xffffffec, 0x2, 0x6, 0x406d, 0x8001, 0xfff, 0x7, 0x100, 0xab3, 0x2, 0x7747, 0x7fff, 0xff5, 0xcc55, 0x80000001, 0x5, 0x8001, 0x4, 0xb3, 0x7, 0x1, 0x6, 0x3, 0xfffffffa, 0x9, 0x1, 0x48b, 0x800, 0x4cb6, 0x9, 0x5, 0xffffffff, 0x1f, 0x80000001, 0xfffff800, 0x3, 0x9, 0x7, 0x7fff, 0xffffdc1f, 0x0, 0xb6b1, 0x3ff, 0x17, 0x1, 0x0, 0x4, 0x8, 0xfb9e, 0xfffffffc, 0x85c, 0x7f, 0x8, 0xd7, 0x7, 0x8, 0x200, 0x10000, 0x128, 0xa000000, 0x3, 0x7, 0x969, 0x1, 0x7f, 0x1, 0x80, 0x80000001, 0x1, 0x3, 0x200, 0xc551, 0x7, 0x8, 0x2aa, 0x3, 0x5, 0xccd4, 0x2, 0x4, 0x528f, 0x6, 0x4, 0x1, 0x200, 0x4, 0x6, 0x438c, 0x40, 0x0, 0x5, 0x7fff, 0x7301, 0x3f, 0x5, 0xaa, 0x80, 0x7fff, 0x100, 0x0, 0xfffffc00, 0x80000001, 0x2d7, 0xffffffff, 0x1ff, 0x4fb1b63e, 0xfff, 0x5, 0x7, 0x7, 0x80000001, 0xa3, 0x7, 0x7, 0x7, 0x4, 0x5, 0x10001, 0x80000001, 0x187, 0x80000000, 0x2, 0x9, 0x5, 0x316a, 0x3, 0x48, 0x1, 0x6, 0x6, 0xf44, 0x3, 0x7, 0x1, 0x101, 0x3, 0x82, 0xdd, 0xffff, 0xffff7fff, 0x3, 0x5, 0xffffffff, 0x33b, 0x6, 0x4, 0x1, 0x8, 0x9, 0xd9f3, 0x9, 0x3, 0x4, 0x6, 0x7, 0x401, 0x3, 0x5dd1443a, 0x4, 0x5, 0x7, 0xdad, 0x7f, 0x86c7, 0x4, 0xf360, 0x9, 0x1, 0x5, 0x3b2e, 0x6, 0x8000, 0x101, 0x1, 0x9, 0x2b19, 0x6, 0x3f, 0x7, 0x32c1eeae, 0x80000001, 0xc0000, 0xe00, 0xfffffffb, 0x4, 0x7, 0x40, 0xb192, 0x4, 0x7f, 0x100, 0xdaf, 0x4, 0x9, 0x6, 0x2, 0x2, 0x5, 0x6, 0x1000, 0xfffffff7, 0x4, 0x7, 0xe4d, 0xb83, 0x4, 0x0, 0x1, 0x1, 0x9, 0xfffffffc, 0xfffffff7, 0x5, 0x2, 0x9, 0x7, 0x5, 0x400, 0x5, 0x0, 0x4, 0x200, 0x7fffffff, 0x5, 0x4, 0xd8, 0x800, 0x80000001, 0xc6e, 0xffffffe1, 0x4, 0x1, 0x7ff, 0x6, 0x97, 0x1, 0x8, 0x1ff, 0xd41, 0xffffa43d, 0x0, 0x5, 0x8, 0x800, 0xfffffffb, 0x80000001, 0x6, 0x3f, 0x8000, 0x100, 0x805b, 0x7, 0x8, 0xd23e, 0x3, 0xb4c, 0x8, 0x4, 0x2, 0xffff, 0xc4400000, 0x0, 0x81, 0x3, 0x1, 0x6, 0x3, 0x1, 0x5c76, 0x3, 0x7ff, 0x13e, 0x9, 0x5eec, 0x0, 0x9, 0x5, 0x3eedef45, 0x5, 0x4, 0x8000, 0x8, 0x0, 0x2, 0xada, 0xf1, 0x5, 0x8, 0xd542, 0xdb9e, 0x9, 0x1, 0x7fffffff, 0x0, 0x1, 0x4, 0xaf3, 0x3, 0x400, 0x9, 0x1, 0x0, 0x3ff, 0x2, 0x9, 0x7fff, 0x5, 0x2ae5, 0x1, 0x5, 0x9, 0x100, 0x4, 0x0, 0x9, 0x31f, 0x2, 0x3, 0x7ff, 0x0, 0x1, 0x6, 0x3, 0x4, 0x5, 0x2, 0x2, 0x2, 0x1, 0x0, 0x5, 0x4d7, 0x9, 0x8, 0xc000, 0x10001, 0x4, 0x9, 0x6f, 0x633a, 0x7fffffff, 0x4, 0x3, 0x4, 0x3b6, 0x3, 0x9, 0xcc, 0x8, 0x1, 0x5, 0x7f, 0x100, 0xc393, 0xe20, 0x10001, 0x80, 0x5, 0x8001, 0x1000, 0x9, 0x80000001, 0xc64, 0x8, 0x100, 0x1f, 0x1, 0x9, 0xff, 0xfffffff8, 0x6, 0xcba, 0x100, 0x80000001, 0x7ff, 0x8, 0x2, 0x1, 0x3, 0x4, 0x7, 0x1, 0x7, 0x7, 0x7fffffff, 0x0, 0x6, 0x0, 0x1, 0x6f, 0x5, 0x43, 0x8, 0x1e, 0x4, 0x8, 0x54e, 0x1, 0x6, 0xf2, 0x6, 0x762d28ef, 0x2, 0xfffffffd, 0x324d, 0x4, 0x8000, 0x9, 0x4, 0xc6d, 0x3c108804, 0x6, 0x1, 0x2, 0x9, 0xff, 0x8000, 0x0, 0x4, 0x120, 0x6, 0x5, 0x4, 0x3ff, 0x3ff, 0x8001, 0x7fffffff, 0x8, 0xcea9, 0x81, 0x0, 0xfffffffb]}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000000)) tkill(r0, 0x1000000000013) [ 590.335696][ T12] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 590.442541][ T50] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 590.589947][ T12] usb 3-1: Using ep0 maxpacket: 32 08:07:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000000)={0x2, 0x6bf, 0x81}) socket$kcm(0x11, 0x8000000002, 0x300) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_buf(r3, 0x1, 0x6, &(0x7f0000000500)=""/4097, &(0x7f0000000040)=0x1001) [ 590.682409][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 590.719434][ T12] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 590.727935][ T12] usb 3-1: config 0 has no interface number 0 [ 590.734368][ T12] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 590.744798][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.802838][ T50] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.814202][ T50] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 590.827086][ T12] usb 3-1: config 0 descriptor?? [ 590.832400][ T50] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 590.841543][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:07:56 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_create(0x7, &(0x7f0000000200)={0x0, 0x13, 0x1, @thr={&(0x7f0000000000)="beb925cdf98866d0f95883d4af77f8a9b7d6e75de8c1316ea5cd3727843a9663bc8b59bcc9be3eb48082e6b33160be97c3dd43f23bced2fef037538693e8fe73622e60edccf3e9fd69add50dcf45ac94ac5f66d74b6403d577ad39a5a835173e1555890869036151a23e7c024ca7be3e1a005ec036c082a2bb465fb81c6652f77a0aca255f439cfbfb2e67280be134d1f80d41cf142fc5626883d61cbf0cc7bd44652808ecf0d08c74d77a", &(0x7f00000000c0)="c0d6af729496a787ee338d81c56e98a0384543f0d5d53e42cc9e401b7d5e6b502df81d5e9d845bf3675ea34050c25550be706047d600f03b39625a45033b1a41a1d07a81906e48d41372de32adeec6107f0beea4c27a8357652787377c66b0bf5d36957f2c2f532c7d6d3a6382119c56651a3c1a31062908d27cda5b2923c81c0dc21a6e45f35f4377cc78f8a4702602bdf63bf62846168ea487a571d807f50551d0dfe83f3032d5d111deebef8d83f466e4b2425047054edb3330c40d08bb5a243162dc0e9fb0d8bc5fb09214bd"}}, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000000300)={0x0, 0x8, 0x0, @thr={&(0x7f0000000280)="e2875dee6f170ea4689ca87fd6a6ab90dcd262e6a47a4715fe58a828c376a27a5675954635f3226f00f67340b1e96d45c94963cf8e632d5d23682ffcd1b98c337a363a2e7ffaef9725cbdbe826fb5b1d", &(0x7f0000000440)="268f3ad37b972dc8fcf6574e7d690842a31376ca90d23b6eb2f13d82053dbbb00a70f04f2b638b085e7309e7956279c0ff0e7467388bb9f1ad0c6633d1a967e643c27d9abaf3cb15356d1531547777bdee696d7c070405b10f8904b639b999a5"}}, &(0x7f00000004c0)=0x0) clock_gettime(0x0, &(0x7f0000000500)) fallocate(r1, 0x0, 0x0, 0x3) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timer_settime(r3, 0x2, &(0x7f000006b000)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000000000013) [ 590.908936][T17532] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 590.908936][T17532] program syz-executor.1 not setting count and/or reply_len properly 08:07:57 executing program 3: socket$kcm(0x11, 0x8000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000001440)=""/4097, &(0x7f0000000040)=0xffffffffffffffe3) 08:07:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYBLOB="733e6d83c263785ab7ecb9b7bc58833a925b74dcea3c78e0cc0b7261a535ba402e1245996be784caffda2a2cbcbec6b234e50384bfc4755e4cc1121bb4793e7e84ce438a9454", @ANYRESHEX=0x0], 0x72) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 591.127297][T17547] sg_write: data in/out 808464396/66 bytes for SCSI command 0xb9-- guessing data in; [ 591.127297][T17547] program syz-executor.1 not setting count and/or reply_len properly [ 591.492495][ T50] usbhid 6-1:32.0: can't add hid device: -71 [ 591.499185][ T50] usbhid: probe of 6-1:32.0 failed with error -71 [ 591.512040][ T50] usb 6-1: USB disconnect, device number 44 [ 591.512763][ T12] CoreChips 3-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 591.932667][ T12] CoreChips 3-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 591.943716][ T12] CoreChips 3-1:0.159 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 591.954165][ T12] CoreChips: probe of 3-1:0.159 failed with error -71 [ 591.968433][T17551] sg_write: data in/out 808464396/66 bytes for SCSI command 0xb9-- guessing data in; [ 591.968433][T17551] program syz-executor.1 not setting count and/or reply_len properly [ 591.988335][ T12] usb 3-1: USB disconnect, device number 67 [ 592.692319][ T12] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 592.932282][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 593.052405][ T12] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 593.060899][ T12] usb 3-1: config 0 has no interface number 0 [ 593.067650][ T12] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 593.076999][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.087038][ T12] usb 3-1: config 0 descriptor?? 08:07:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 08:07:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x20c, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e20, @remote}}}, 0x84) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x63, 0x6fe, [], &(0x7f0000000180)=0xd6}) r6 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r6, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:07:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x100000, 0x0) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:07:59 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x301ca2, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000100)=""/160) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x1, 0x600080) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000200), &(0x7f0000000240)=0x4) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300090069000000a2e407edab0080582800000046008107a277001419000a000d000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x101, 0x4b101e49ddc7f3ac) [ 593.463002][ T12] CoreChips 3-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 08:07:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r5, r6}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00'}}) keyctl$invalidate(0x15, r6) r7 = socket(0x400000000000010, 0x802, 0x0) write(r7, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000000)={@multicast2}, 0x8) [ 593.505417][T17561] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 593.505417][T17561] program syz-executor.1 not setting count and/or reply_len properly [ 593.522445][ T12] CoreChips: probe of 3-1:0.159 failed with error -71 08:07:59 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x10, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)=0x2, 0x0) [ 593.584920][ T12] usb 3-1: USB disconnect, device number 68 08:07:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) linkat(r1, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x400) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100)=0x4, 0x2c9) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0x3e8}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 08:07:59 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000002440)=""/4084, &(0x7f0000000040)=0xffffffffffffff1d) 08:07:59 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2fb, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x16, 0xd0, 0x8c, 0x10, 0x54c, 0x10, 0x316, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xffffffffffffff72}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) [ 593.824017][ T50] usb 6-1: new high-speed USB device number 45 using dummy_hcd 08:08:00 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2400) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x78, 0x4) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:08:00 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x58d000, 0x0) r6 = socket(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="67f30000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000204000000000c020000000000000000", @ANYRES32=r8], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x200, 0xffff, 0x19, r8}, &(0x7f00000000c0)=0x10) r9 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r9, 0x1000000) sendfile(r4, r9, 0x0, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r10, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r12, 0xb704, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:08:00 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r3 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r3, 0x1000000) sendfile(r1, r3, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) tkill(r0, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r6, 0x4c01) [ 594.042831][T12640] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 594.073587][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 594.172370][ T12] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 594.202604][ T50] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.214231][ T50] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 594.227388][ T50] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 594.236773][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.298019][T17597] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 594.298019][T17597] program syz-executor.1 not setting count and/or reply_len properly [ 594.316476][T12640] usb 5-1: Using ep0 maxpacket: 16 [ 594.413521][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 594.435830][T12640] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 594.444380][T12640] usb 5-1: config 0 has no interface number 0 [ 594.450753][T12640] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 594.460377][T12640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.471667][T12640] usb 5-1: config 0 descriptor?? [ 594.520445][T12640] go7007 5-1:0.126: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 594.530426][T12640] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 594.535352][ T12] usb 3-1: config index 0 descriptor too short (expected 65394, got 745) [ 594.540376][T12640] go7007: probe of 5-1:0.126 failed with error -12 [ 594.548728][ T12] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 594.563656][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.574377][ T12] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 594.583754][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 594.597040][ T12] usb 3-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 3.16 [ 594.606458][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.616639][ T12] usb 3-1: config 0 descriptor?? [ 594.664875][ T12] cdc_ether: probe of 3-1:0.0 failed with error -22 [ 594.672746][ T12] usb-storage 3-1:0.0: USB Mass Storage device detected [ 594.685823][ T12] usb-storage 3-1:0.0: Quirks match for vid 054c pid 0010: 281 [ 594.693908][ T12] usb-storage 3-1:0.0: This device (054c,0010,0316 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 5.4.0-rc3+) [ 594.693908][ T12] Please send a copy of this message to and [ 594.757854][ T12] usb 5-1: USB disconnect, device number 25 [ 594.802636][ T50] usbhid 6-1:32.0: can't add hid device: -71 [ 594.809016][ T50] usbhid: probe of 6-1:32.0 failed with error -71 [ 594.823325][ T50] usb 6-1: USB disconnect, device number 45 [ 594.867553][ T2855] usb 3-1: USB disconnect, device number 69 08:08:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00002e0000002e00f415d22401e24a1abb00b1e1c921ae1a480572d87355ca88bc81000000fbb245cdb0a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 08:08:01 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4, 0x0) r0 = socket$kcm(0x11, 0x8000000000, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:08:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x101000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 08:08:01 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="b826858d8b80ecdb4cb9d901631904", 0x14}], 0x1, 0x0, 0xffffffffffffff7e}, 0xcc000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r2}) [ 595.281459][T17610] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 595.281459][T17610] program syz-executor.1 not setting count and/or reply_len properly 08:08:01 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000080)={0x8, 0x3, @value=0x2}) socket$inet6(0xa, 0x4, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000001440)=@newtaction={0x3f10, 0x30, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{0x5c, 0x1, @m_ife={0x58, 0x8, {{0x8, 0x1, 'ife\x00'}, {0x3c, 0x2, [@TCA_IFE_DMAC={0xc, 0x3, @broadcast}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x89}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x8, 0x5, 0x6}, @TCA_IFE_SMAC={0xc, 0x4, @dev={[], 0x25}}]}, {0xc, 0x6, "f48233c280dbdd"}}}}, {0x2dc4, 0x1, @m_pedit={0x2dc0, 0x17, {{0xc, 0x1, 'pedit\x00'}, {0x2d64, 0x2, [@TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x10000, 0x3f, 0x7, 0x80000000, 0x8}, 0xfa, 0x8, [{0x194, 0x5, 0xf78d, 0x1, 0x2, 0x2}, {0x400, 0x1, 0x7ff, 0x80, 0x80000001, 0x3}, {0x8, 0x4, 0x800, 0x3ff, 0xfc8, 0x51298f16}, {0x33, 0x670, 0x10000, 0x6, 0x0, 0x80000001}, {0x1ff, 0x1, 0x4, 0x8, 0x1f, 0x7}, {0xa75, 0x0, 0x3, 0xfffffff9, 0x4, 0x4}, {0x0, 0x0, 0x3, 0x0, 0x10001, 0x3}, {0x4, 0x3, 0xfff, 0x7, 0x9, 0xdf}, {0x7, 0x6, 0x7, 0x6, 0x8000, 0x1}, {0x5d3fee92, 0x6, 0x40, 0x200, 0xffffffff, 0x51bb5aab}]}, [{0x3, 0x16e5, 0x140000, 0xfff, 0x9, 0x101}, {0x0, 0x8744, 0x200, 0x0, 0x956, 0x40}, {0x9, 0x3, 0x7, 0xc165, 0x5, 0x7}, {0x8, 0xffffffff, 0x200, 0xfffffffb, 0x5, 0x7}, {0x2, 0x2, 0x8, 0x3, 0x8, 0x20}, {0x101, 0x3, 0x2, 0x4, 0x2, 0x3}, {0x3, 0x4, 0xd617, 0x1, 0x6de0, 0x3}, {0x80000000, 0x4, 0x6, 0x1ff, 0x590}, {0x3, 0x10000000, 0x4, 0x4, 0x6, 0x80000000}, {0x3f, 0xfffffffb, 0xfff, 0xf6df, 0x8, 0x6}, {0x5, 0x7, 0xffff, 0x8, 0x8, 0x10001}, {0x6, 0x3, 0x8, 0xfffffff8, 0x8, 0x6}, {0x8, 0x4, 0x93, 0x40, 0xe4, 0xfff}, {0x9, 0xa43, 0xb2, 0x3b27, 0xfff, 0x20}, {0x3, 0x6, 0x7, 0x2, 0x5, 0xb400}, {0x81, 0x9, 0x10001, 0x12e9, 0x0, 0x100}, {0x1ff, 0x9, 0x1, 0x7, 0x8000}, {0x101, 0x4, 0x8, 0x6, 0xaba, 0x40}, {0x3ff, 0x5, 0x7, 0x5, 0xb822, 0x4}, {0x3, 0x4, 0x6, 0x0, 0x0, 0x200}, {0xffffffff, 0x2, 0x24, 0xe4, 0xb966, 0x8}, {0x3ff, 0x1, 0x4, 0x3, 0x0, 0x80000000}, {0x2, 0x1, 0x6ac, 0x2, 0xd63f, 0x9}, {0x6, 0x2, 0x7f, 0x3f, 0x4, 0x2}, {0xfffffffd, 0x5, 0xfff, 0xda2, 0x1c8, 0x7fff}, {0x2, 0xa1, 0x6, 0x7, 0x9cd2, 0x7}, {0xff, 0x7ff, 0xfffffffa, 0x7, 0x0, 0x2}, {0x2, 0xffffffff, 0x8, 0xc4, 0x41bd, 0x9}, {0x8, 0x4, 0x100, 0x1, 0x4, 0x2}, {0x2882c88, 0x1, 0x535d, 0x20000000, 0x7ff, 0x7fffffff}, {0xa60, 0x5653, 0x40, 0x1, 0x5, 0x35f55aa4}, {0x7, 0x9ad, 0x6, 0x4, 0x2000, 0xf3a}, {0x8000, 0x8, 0x38d, 0x10001, 0xbda, 0x9897}, {0x26, 0x9, 0x7fffffff, 0x5, 0xdf7c, 0x7a0}, {0xff, 0x1, 0x49b41416, 0x7ff, 0x200, 0x7}, {0x1, 0x9, 0x5, 0xfffffe01, 0x10001, 0x3}, {0x7, 0x0, 0x6, 0x90, 0x7ff, 0x480}, {0x0, 0x4, 0x0, 0xe5, 0x7fffffff, 0x1ff}, {0x81, 0x7, 0x14f, 0x7e90, 0x2, 0x3}, {0x8, 0x4, 0x2, 0x7, 0xa12, 0x5}, {0x4c7000, 0xd0, 0xfffffffa, 0x1, 0xfffffffd}, {0x40, 0xe77c, 0xfffffaa1, 0xc3d3, 0xfa7, 0x1}, {0x8001, 0x400, 0x7, 0x1, 0xe69, 0x80000000}, {0x8, 0x4, 0x200, 0x5, 0x1, 0x9}, {0x9, 0x10000, 0x1, 0x9, 0x8, 0x9}, {0x2, 0x5, 0x7fffffff, 0x80000, 0x4, 0x2}, {0x5, 0x1f, 0x6, 0x6, 0x0, 0x3}, {0x8, 0x209, 0x8, 0x0, 0x1ff, 0x114eee04}, {0x3, 0x800, 0x8, 0x7393, 0x81, 0x9}, {0x8, 0x5, 0x7f5b, 0x1f, 0xffff8000, 0x6}, {0x20, 0x8, 0x4, 0x1, 0x7, 0x80}, {0x8, 0xffff9d78, 0xf6ef, 0x0, 0x2, 0x7}, {0x80, 0x1ff, 0x60000, 0x4, 0x1, 0x33a}, {0x5, 0x4, 0x240, 0x6, 0x1000, 0x3}, {0x1f, 0xfff, 0x3, 0x53eb, 0xec, 0x4}, {0xa0, 0x1, 0x2c4, 0x101, 0x8001, 0x6}, {0x6, 0x8, 0xff, 0x80000000, 0x3f, 0x222}, {0x81, 0x1, 0x80000000, 0x3a13, 0x800, 0x9}, {0x5, 0xffff, 0x400000, 0x8000, 0x400, 0xffffffff}, {0x3, 0xaf, 0x6, 0x9, 0x7, 0x7}, {0x1, 0x200, 0x22, 0x65af, 0x4, 0x80000001}, {0x100, 0x404bc37f, 0x101, 0x7, 0x40, 0xdd2a}, {0x2, 0x4, 0x7ff, 0x7fff, 0x2, 0x2}, {0x80, 0x800, 0x0, 0x81, 0x7, 0x1f}, {0x563, 0x6, 0x1, 0x2, 0x8, 0x2cd}, {0x1, 0x10000, 0x7, 0x1a, 0x5, 0x4}, {0x1, 0x5, 0x1, 0x3f, 0x1000, 0x5216d0b5}, {0x0, 0x8, 0x1000, 0x3ff, 0x80, 0x2}, {0x40, 0x6df, 0x3, 0x200, 0x4, 0x10000}, {0x8d7, 0x1, 0x3d5f, 0x9, 0x80000000, 0x7}, {0x4, 0x2, 0x8, 0x7, 0x605a, 0xe69}, {0x9, 0x7, 0x3, 0x8, 0x3, 0x8000}, {0x6, 0xffffffff, 0x4, 0x7fff, 0x58, 0x1}, {0x6, 0x2, 0x800, 0x0, 0x3, 0xac9}, {0x7f, 0x0, 0xfffffff8, 0x0, 0x7f, 0x9}, {0x400000, 0x9, 0x7, 0x3, 0x7fff, 0x3}, {0x4, 0x4, 0x1, 0xffffff01, 0x94, 0x1}, {0xfffffff7, 0xfe000000, 0x3, 0x8, 0x6, 0x3}, {0x81, 0x20, 0x3ff, 0x6, 0x200, 0xfffffffa}, {0x5, 0x4, 0x10000, 0xfcb2, 0x400}, {0x7fff, 0x3, 0x9, 0x3, 0x3, 0x200}, {0x7, 0x3, 0x8, 0x0, 0x5}, {0x4, 0x0, 0x1, 0x1, 0x1df9, 0xa3e5}, {0x10000, 0x8, 0x0, 0xfffffffa, 0x4, 0x8}, {0x6, 0x1, 0x9, 0xffffffff, 0xfc000000, 0x81e}, {0x29, 0x80, 0x1, 0x4, 0x3f, 0x20}, {0x0, 0x80, 0x101, 0x1f, 0x7316, 0x1}, {0x7, 0x0, 0x0, 0x0, 0x7, 0xf787}, {0x40, 0x6, 0x6, 0x4f, 0xee, 0x9}, {0x200, 0x35d80000, 0x2, 0x80000001, 0x7, 0x5}, {0x2, 0x9, 0x0, 0x9, 0x4ef5}, {0x6, 0x3f, 0xf0d, 0x2, 0x4476, 0x8001}, {0x6, 0x8, 0x24, 0x200, 0x1, 0x80000000}, {0x7, 0xfffffffe, 0xa19, 0xf7, 0x5, 0x8}, {0x9, 0x7, 0x3ff, 0x9, 0x3, 0xabe4}, {0xa5, 0x6, 0x8, 0x3bfc, 0x7fff, 0xeb0}, {0xfffff000, 0x6, 0x7, 0x8, 0x8000, 0xab0}, {0x8000, 0x8, 0x10000, 0x1, 0x95, 0x4}, {0x6d26, 0x7, 0x6, 0x3f, 0xc2, 0x7fff}, {0x0, 0x4, 0x9, 0x161, 0x3, 0x2}, {0x8001, 0x7fff, 0x4, 0x10001, 0x1, 0x2}, {0x4, 0x7ff, 0x6, 0xff, 0xb8b1, 0x5}, {0x7, 0xff, 0x0, 0x9, 0x5c, 0x3f}, {0x3, 0xe0000000, 0x5, 0x3, 0x0, 0x3}, {0xb351, 0x0, 0x6, 0xffffff80, 0x3ff, 0x8}, {0x7, 0x5e1c, 0x0, 0x7fff, 0xfff, 0x9}, {0x800, 0x8, 0x5, 0x1ff, 0x10000, 0x7}, {0x80, 0x9, 0x0, 0x1, 0x8, 0x80000001}, {0x80000000, 0xffff0000, 0xbe, 0x1, 0x813b, 0xa5}, {0x9, 0x53, 0x90b3, 0x7, 0x6244, 0x3}, {0x3ff, 0x5, 0x7fffffff, 0x0, 0x3f, 0xfffffff9}, {0x1000000, 0x7, 0x0, 0x5b, 0x5, 0x400}, {0x1, 0xf4c8, 0xf701, 0x5, 0x4, 0x2}, {0x10000, 0x6, 0x6, 0x5b0, 0x7, 0x3}, {0xffff, 0xfffffff7, 0x8, 0x69, 0x5, 0xaf}, {0x10000, 0x80000001, 0x818, 0x8, 0x2}, {0x6, 0x9, 0x9, 0x3, 0xffffffde, 0xffffffca}, {0x7fff, 0xdb7, 0x3c3, 0x0, 0x4, 0x200}, {0x7f, 0x8, 0x1, 0xa5b, 0x9, 0x8}, {0x5, 0x7, 0x1, 0x7fff, 0x48, 0x10001}, {0x9, 0x5, 0x6, 0x1f, 0x1, 0x1}, {0x1, 0x800000, 0x9, 0x80000001, 0xff, 0x1}, {0xff, 0x2, 0x5, 0xffffffc8, 0x9, 0x5}, {0x9, 0x3f, 0x2, 0x9, 0x10001, 0x200}, {0xecff, 0x0, 0x0, 0x9, 0x101, 0x3}, {0x101, 0x3, 0xffffffff, 0x8001, 0x6, 0x8b}, {0x81, 0x1f, 0x101, 0xfffff800, 0x0, 0x8000}, {0xa8ec, 0x80000000, 0x12, 0x2, 0x3, 0x7}], [{0x3}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0xb, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x3}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x7c6b1b6ecee316cd}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x992686d87a17097e}, {}, {0x0, 0x1}, {0x2, 0x602ec638dc63076b}, {0x2, 0x2}, {0x5}, {0x1}, {0x3}, {0x7944d668c79d3f41, 0x1}, {0x99d65f1dd35a544a}, {0x6}, {0x3}, {0x2, 0x1}, {0x2}, {0x77b9b7fca6efcccd, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x5, 0x3}, {}, {0x1}, {}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x4}, {0x4}, {0x1}, {0x6, 0x1}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x2}, {0x6}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1a747ba2f406b326}, {0x3}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x2}, {0x2}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0xb975261039347ce4}, {0xd, 0x1}, {0x1, 0x1}, {0x5, 0x8571bc5de9ed4c42}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0xe18cff532bcd15cf}]}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0xedf, 0x3, 0x96202c6de7287f6d, 0x5, 0x5}, 0xff, 0x3f, [{0x40, 0x8, 0x0, 0x2, 0x101, 0x1d}, {0xae, 0x4, 0x7fff, 0x0, 0xfffffffb, 0x2}, {0x8000, 0xdf2, 0x62c, 0x7, 0x800, 0x2}, {0xfffffffd, 0xf2d10000, 0x6, 0x42, 0x0, 0x2}, {0x0, 0xffffffff, 0x101, 0x6, 0x7, 0x49aebd37}, {0x4, 0x0, 0x6, 0x47af8, 0x220, 0x1}, {0x2, 0xbce8, 0x8, 0x344, 0xffff, 0x8}]}, [{0x6, 0x1, 0x400, 0x0, 0x1000, 0x5}, {0x6, 0xfffffe01, 0x3, 0x80000001, 0x1000, 0x10000}, {0x9, 0x70f, 0x8, 0x0, 0x0, 0xd6}, {0x3f, 0x9767, 0x1, 0x72, 0x801, 0x5}, {0x4, 0x30, 0x1, 0x9, 0x4, 0xff}, {0x6, 0x9, 0x8, 0x2, 0x4f, 0x4}, {0x5, 0x2, 0x2, 0xc30b, 0x4, 0x6}, {0x1, 0x80, 0x592, 0x6, 0x20, 0x9}, {0x7f, 0x893, 0x7fffffff, 0x7ff, 0x5be4, 0x61810d84}, {0x4, 0x7f, 0x71, 0x0, 0x1, 0x1}, {0xff, 0x0, 0xfffffffb, 0x4, 0xb7, 0x4}, {0x1, 0x200, 0x400, 0x6, 0xbb, 0x8000}, {0x1, 0x3ff, 0xfffff801, 0x3ff, 0x800, 0x7}, {0x7, 0x4, 0x6, 0x4, 0x4857, 0x679}, {0x7fffffff, 0xa41, 0x3, 0x4, 0x4, 0xfffffff7}, {0x1, 0x9, 0x401, 0x2, 0x101, 0x7}, {0x2, 0x0, 0xfffff54c, 0x3ff, 0x597, 0x9}, {0x8, 0x8, 0x6, 0xfffffff9, 0xffff, 0x4}, {0xff, 0x7fffffff, 0x81, 0x6, 0x1, 0x101}, {0x2, 0x3cd, 0x2, 0x7fff, 0x40000, 0x589}, {0x2, 0x3, 0x5, 0x6, 0x7f, 0x3ff}, {0x3, 0x80000001, 0x8000, 0x8, 0x6, 0xfffffffb}, {0x4, 0x4, 0x3ff, 0x6, 0x101}, {0x3ff, 0x16d1937b, 0x9, 0xbe92, 0x8, 0x9}, {0x1, 0x1, 0x10000, 0x3, 0x4, 0x9f9}, {0x2, 0x703, 0xfffffffe, 0x1, 0x0, 0x9}, {0x4, 0x0, 0x7, 0x0, 0x3, 0xe4}, {0x7, 0x6, 0x80000001, 0x8, 0xffffffff, 0x383}, {0x0, 0x8, 0x5, 0x7fffffff, 0x3f, 0x8}, {0x8, 0x0, 0x1fa, 0x4, 0x0, 0xee}, {0x8, 0x3ff, 0x1, 0xffffffff, 0x2, 0x2}, {0x8, 0x8, 0x2, 0x8, 0x840c, 0x200}, {0x6, 0x3ff, 0xed0, 0x20, 0x3, 0x2}, {0x3, 0x6dd6, 0x3f, 0x7ff, 0x8, 0x2}, {0x0, 0x4e1, 0xfffff001, 0x1, 0xff, 0x4}, {0x1, 0x4, 0xffff, 0x10001, 0x800, 0x8ab}, {0x3, 0x80000000, 0x0, 0x8, 0x5, 0x459}, {0x6, 0xff, 0xffff0001, 0xf59, 0x4, 0x4}, {0x2, 0x7fff, 0x7, 0x30f1, 0x8000, 0x40}, {0x80000000, 0x9e, 0x9, 0x0, 0x0, 0x100}, {0x2, 0x0, 0x979, 0x8955, 0x8, 0xcf93}, {0x5, 0x80000001, 0x0, 0xffffff59, 0x4, 0xea}, {0x401, 0x0, 0xffffffff, 0x5, 0x0, 0x6}, {0x4, 0x3, 0x3, 0x9, 0x3ff, 0x5}, {0x6, 0x3, 0xaa46, 0x4, 0x0, 0xffffffff}, {0x4, 0x0, 0xffffffff, 0x8001, 0xb6, 0x8}, {0x8001, 0xfffffffb, 0x1ca, 0x5160bb41, 0x1000, 0x6}, {0x504, 0x1786, 0xfffffffb, 0x20, 0x40704353}, {0x0, 0x0, 0x7f, 0x2, 0x1, 0x5}, {0x5, 0x8, 0x4, 0x1ff, 0x2, 0x51e11283}, {0x8, 0x5, 0x8001, 0x9, 0x1}, {0xa6, 0x4, 0x6, 0x4, 0x3, 0x3ff}, {0x12f, 0x4, 0x3f000, 0x5, 0x5df14876, 0x928b}, {0x4, 0x3284, 0x81, 0x3, 0x20, 0x5}, {0x6, 0x0, 0x2, 0x200, 0x1, 0x4}, {0x8, 0x3, 0x2, 0x1, 0x8, 0x2}, {0x0, 0x0, 0x7, 0x7, 0x100, 0x1}, {0x8f81, 0x3f, 0x10000, 0x80000000}, {0x401, 0xfffffffd, 0x6, 0x6, 0x9, 0x8}, {0x6, 0x3, 0x7fff, 0x7, 0x5, 0x40}, {0xfffffffa, 0x9, 0x0, 0x9c9, 0xde, 0x22f}, {0x7f, 0x10001, 0x100, 0x4, 0x3ff, 0x64bc9d7}, {0xcda, 0x219a, 0x3, 0x2, 0xfffffffd, 0x4aa0745c}, {0x401, 0x1, 0x0, 0x0, 0x4, 0x1b0fa916}, {0x4, 0x2, 0xffff, 0xcd, 0x800, 0x1}, {0x3f, 0x5, 0x0, 0x0, 0x1, 0xa868}, {0x8, 0x1000000, 0xfff, 0x3b, 0x526, 0x4}, {0x7fff, 0x7fffffff, 0x7ff, 0x5, 0x9, 0x7}, {0x7, 0x4, 0x7, 0x1, 0x6, 0x1}, {0x40, 0x7, 0xffffff7f, 0x1, 0x2, 0x8}, {0x10001, 0xde, 0x6, 0xfff, 0x200, 0x100}, {0xfff, 0x2, 0x6, 0x6, 0x1, 0xf565}, {0xffffff00, 0x1, 0x2, 0x2, 0x1ff, 0x6}, {0xf1, 0x0, 0x3, 0x20, 0x50000000, 0xffff}, {0x4, 0x100000, 0x6, 0x5a6, 0x4, 0x4}, {0xd1d5, 0x80000001, 0x7ff, 0x5, 0x4, 0x4}, {0x1, 0x6, 0x10, 0x100, 0x1, 0x1}, {0x0, 0x751, 0x7fff, 0x4, 0x7, 0x101}, {0x7, 0xfffffff8, 0x3, 0x400, 0x1000, 0x2}, {0x0, 0x9, 0xffffffff, 0x0, 0x5, 0x8000}, {0x1f, 0x3, 0x8, 0x65, 0x7, 0xff}, {0x2, 0x100, 0x3ff, 0x8, 0x8, 0x2}, {0x35b05605, 0x13, 0x400, 0x80, 0x8, 0xba}, {0x9, 0x1f, 0x3, 0x20, 0x8, 0x3}, {0x2, 0x401, 0x0, 0x4, 0x7ff, 0x4}, {0x0, 0x3, 0x3956, 0x10000, 0x7, 0x3}, {0x5, 0x6, 0x1, 0xe5f3a753, 0x8}, {0x0, 0x80200000, 0xb56, 0x1, 0x3a0, 0x6}, {0x2, 0x5, 0x20, 0x78d, 0x3f, 0x5}, {0x2, 0x0, 0xff, 0x3ff, 0x9, 0x7}, {0x9be7, 0x3, 0x7, 0x4e0, 0x5, 0x1000}, {0x2, 0x31, 0xc98, 0x2000, 0x5, 0xff}, {0x9a0, 0xe8, 0x2, 0x40b96210, 0x780, 0x6}, {0x81, 0x8, 0xeb29, 0x2, 0xfffff801, 0x400}, {0x3ff, 0x7ff, 0x7, 0x2, 0x80000001, 0x10001}, {0x1, 0xe3, 0x48d, 0x80, 0x9, 0x5}, {0x1, 0x10001, 0x550c, 0x7, 0x3f, 0x2ff}, {0x5, 0x7, 0xfffffffa, 0x81, 0x9, 0x6}, {0x100, 0x3, 0x7, 0xbac, 0x51a8, 0x5}, {0xff, 0xff, 0x1, 0x2a8, 0x10000, 0x1}, {0x0, 0x7fffffff, 0x66f, 0x0, 0x5, 0x8}, {0x4, 0x1ff, 0x2, 0x4000000, 0x7, 0x5}, {0x9, 0x1, 0xda, 0x4000000, 0x3, 0x1c00}, {0x3f, 0x25, 0x6, 0x9, 0x9}, {0x32, 0x6e3, 0x9, 0x1, 0x44, 0x1}, {0x5, 0x722, 0x7fff, 0x8000, 0x9}, {0xf1c, 0x400, 0x7f, 0x4, 0x218, 0xffffffff}, {0x4, 0x3, 0x27c3dfb4, 0x5, 0x898, 0x7}, {0xd3d, 0x3, 0x5, 0x0, 0x401, 0x800}, {0x2, 0x8, 0x6e0, 0xfffffffd, 0x81, 0xfff}, {0x7ff, 0x401, 0x70700000, 0x1, 0x7fffffff, 0x5}, {0x3f, 0x3, 0x5, 0xfffff000, 0xffffffff, 0x80000000}, {0x6, 0x1, 0x5, 0x8001, 0x2, 0x9}, {0x6, 0x5, 0x3cf, 0x2, 0x7fff, 0x5}, {0xfffffffd, 0x565c852b, 0x8, 0x100, 0x40, 0x3}, {0xfff, 0x914, 0x400, 0x7, 0x200, 0x1}, {0x5, 0x9d09, 0x10000, 0x9, 0x3ff, 0x9}, {0x7, 0x6000000, 0xaeba, 0x80000001, 0x800, 0x3}, {0x5, 0x4, 0x401, 0x0, 0x0, 0xffffffff}, {0x4, 0x3fe, 0x7, 0xbb, 0x7f}, {0x5, 0x9, 0xffffff11, 0x100, 0x2, 0xffff2933}, {0x3, 0xa56, 0xffffffff, 0x482, 0xd2b3, 0x3}, {0x3, 0x0, 0xfffffffa, 0x800, 0x6, 0x3}, {0x8, 0x4, 0x3ff, 0x7, 0x9, 0xffffffe0}, {0x8, 0x5, 0x4, 0x6, 0x2, 0x2}, {0x4, 0x401, 0x6, 0x0, 0x7, 0x3f}, {0x6, 0xffffffe1, 0x200, 0x4, 0x8, 0x6}, {0x718, 0x0, 0x483, 0x9, 0x6, 0x20}], [{0x2}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0xb095803623deab45}, {0x3}, {0x5, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0xf}, {0x0, 0x1}, {0x8fc6845e4af0c2fa}, {0x3}, {0x4, 0x2d11a201935895df}, {0x4}, {0x4, 0x1}, {0x0, 0xa6346358f44cbf0b}, {0x1}, {0x533360d12386eec2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0xacb91cba45fe0cbd, 0x1}, {0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0xdb7527023c5d2925, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x4}, {}, {0x35207e3cb68c024}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x5}, {0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0xd707cf0c62321fd2, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x2}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0xb1d205098938004}, {0x0, 0x3}, {0x5}, {}, {0x4}, {0x1, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x6}, {}, {0x5}, {0x4}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x2}, {0x2}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x4}, {}, {}, {0x4}, {0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0xab2cfb134354cf}, {0x5, 0x3}, {}, {0x4, 0x1}, {0x5, 0x1}, {0xb91f46e478fc0d4a, 0xd9e46998918f5344}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {}, {0x7}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x150, 0x5, [@TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}, @TCA_PEDIT_KEY_EX={0x4c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x1}]}, @TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}, @TCA_PEDIT_KEY_EX={0x3c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x6a813d79bee8e1d5}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x2c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}, @TCA_PEDIT_KEY_EX={0x34, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x394bb813c9c7c2e5}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x10000, 0x9, 0x4, 0xfffffffa, 0x3}, 0x81, 0xc0, [{0x7, 0x10000, 0x1791, 0x8, 0xca16, 0xb4d}]}, [{0x3, 0x4e2, 0x1000, 0x0, 0x10000, 0x6}, {0x200, 0xfb0, 0x0, 0x7fffffff, 0x4, 0x3}, {0x87, 0x3ff, 0x101, 0x0, 0xffffffff, 0x100}, {0x5, 0x7, 0x4, 0xfffffffb, 0x3, 0x6}, {0xfff, 0x9, 0x5, 0x9, 0xf9}, {0x9f, 0x0, 0x4, 0x0, 0x6, 0x6}, {0x3, 0x2cf, 0x8, 0x2, 0x6b50c460, 0x19d591c}, {0x9, 0xc2b, 0x9, 0x8, 0x6, 0x80000000}, {0xcf4, 0x1f, 0x9970, 0x4, 0x7ff, 0xd8}, {0x7f, 0x8, 0x3, 0xffffffe0, 0x8, 0x4}, {0x8, 0x0, 0x0, 0x6, 0x0, 0x7c}, {0x8, 0xffffffff, 0x52, 0x949b, 0x5, 0xee}, {0x2, 0x10001, 0x10001, 0xfffffff7, 0x9, 0x7}, {0xfffffffe, 0x4, 0xdc1, 0xb98, 0x1f}, {0xfffffff9, 0xffff, 0x1ff, 0xb4a, 0xffffff81, 0x2}, {0x3f, 0x80000001, 0x7, 0x10000, 0x101, 0x6}, {0x7, 0x5, 0x2, 0x80, 0x9e, 0x8}, {0x80000000, 0x101, 0x1f, 0x101, 0x49c, 0x5}, {0x8, 0x2, 0xfffffffe, 0x3, 0x8, 0xff}, {0x8, 0x1, 0x89, 0xf8e, 0x6, 0x3ff}, {0x85ef, 0x1, 0x81, 0xad, 0x9, 0x6}, {0x8, 0x7fffffff, 0xb1, 0xffffffe1, 0xfffff4d6}, {0x1ff, 0x7a, 0x83, 0x8001, 0xfffffffe, 0xffffffff}, {0x5, 0x2, 0x1, 0x6, 0x2, 0x9}, {0xffff, 0x81, 0x3, 0x7, 0xffffffff, 0x8000}, {0x7, 0x243, 0x8, 0x7fff, 0x200, 0x5}, {0x2, 0x7fff, 0x3, 0x6, 0x3, 0x7}, {0x68, 0x8, 0x81, 0x1ff, 0x80000001, 0x20}, {0xfffffff9, 0x7, 0x6, 0xaf4, 0x480000, 0x4}, {0x1, 0x6, 0x3, 0x3, 0x9c1d, 0xfff}, {0x0, 0x401, 0xc88d, 0x0, 0x2, 0x409f}, {0x6, 0x3, 0x1, 0xfff, 0x8, 0x101}, {0x400, 0x8, 0x0, 0x7f, 0x9, 0x7fff}, {0x2, 0x4, 0xe526, 0xfff, 0x1f, 0x7}, {0x1, 0x4, 0x5318, 0x99b3, 0x3}, {0x1, 0x20, 0xf82, 0x380, 0x272, 0x8}, {0x0, 0x6, 0x0, 0x3690, 0x6, 0x2}, {0x203f1145, 0x1000, 0xfffffffe, 0x5, 0x6, 0xff}, {0x2, 0x5, 0x7, 0x5, 0xef78, 0x2}, {0x6, 0x576c, 0xfffff388, 0x101, 0x1, 0xb5}, {0x2, 0x1b2e87e3, 0x600, 0x7, 0x239}, {0x0, 0x1, 0x1, 0x8, 0x7, 0x20}, {0x7, 0x7, 0x10001, 0x8, 0x1ffe, 0x4}, {0x5, 0x9, 0x10000, 0x2, 0x4, 0x6}, {0x3, 0x3, 0x36a800, 0x4d, 0x8000, 0x6}, {0x80, 0x8, 0x100, 0x5, 0x6, 0x3}, {0x8, 0x7f, 0x1ff, 0x3, 0x18, 0x2}, {0xe0, 0x9, 0x8c2600, 0x3, 0x8, 0x800}, {0x3, 0x375, 0x2, 0x3bf, 0x3ff, 0x1}, {0x7, 0x8, 0x21, 0x3, 0x2, 0xff}, {0x0, 0x80000001, 0x2, 0x5, 0x2, 0x7}, {0xffff, 0x9, 0x8, 0x8001, 0x0, 0x7}, {0x80000000, 0x0, 0x6, 0x6, 0x83e0, 0x3}, {0xfff, 0x5, 0x4c6, 0x6, 0x7}, {0x1, 0xfffffffd, 0x400, 0x0, 0x2, 0xab}, {0x10000, 0xffffffe1, 0x9, 0x800, 0x0, 0x9}, {0x10000, 0x7, 0x8001, 0xffff, 0x96, 0xab1}, {0x3, 0x100, 0x8000, 0x1, 0x6a56, 0xffff}, {0x7fff, 0x3, 0x1f, 0x4, 0xfffff757}, {0x8000, 0x7, 0x3, 0x9, 0x80000000, 0x5}, {0xbae, 0x40, 0x1, 0x9, 0x7, 0xfffff800}, {0x9, 0x5, 0x7b984c28, 0x101, 0x0, 0xb9}, {0x1, 0x8, 0x9, 0x0, 0x8, 0xbb3}, {0x1, 0x65b, 0x0, 0x5, 0x9, 0xde7}, {0x400, 0x9b93, 0x20, 0xa5a, 0x10001, 0x3}, {0x80, 0x1ff, 0x823c, 0xe8ad, 0x5, 0x80000000}, {0x4, 0x9, 0xffff7fff, 0x8001, 0x8, 0x4}, {0x9, 0x7f, 0x84, 0x3, 0x6, 0x7}, {0xffffff01, 0x1, 0x10000, 0x5, 0x3, 0x5}, {0x7ff, 0xff, 0x80000001, 0x6, 0xfffffffc, 0x400}, {0x6, 0x8, 0x1, 0x26, 0x5, 0x4}, {0x7, 0x26cf, 0x3, 0x5, 0xf5, 0x80}, {0x5, 0x1ff, 0x100, 0x9012, 0xffffffff, 0x4fba42e0}, {0x9, 0x4, 0x8, 0x8, 0x7, 0x6}, {0x2, 0xb7, 0x8a7, 0x1f, 0x3ff, 0x8001}, {0x1, 0x1, 0x1f, 0xafe, 0x2, 0x7}, {0x2, 0x9, 0x101, 0xfd0d, 0x10001, 0x1}, {0x8, 0x40, 0x7fffffff, 0x2, 0x100, 0xb7}, {0x3, 0x713c, 0x7, 0xb04d, 0x8, 0x7aa}, {0x3f, 0x7, 0x6, 0x3, 0x3, 0x3}, {0x200, 0x17c3b78, 0x1, 0x0, 0x2, 0x1}, {0x3, 0x5, 0x2, 0x8000, 0x7, 0x6}, {0xffff, 0x8, 0x2, 0x4, 0x5, 0x4}, {0x1f, 0x8, 0x4, 0x2c4, 0xffffff2d, 0x1}, {0x9, 0x100, 0x4, 0x9, 0x7, 0x4}, {0xfe5d, 0x2, 0x6, 0xc4, 0x4fd, 0x8001}, {0x1dea265c, 0x4, 0x81, 0x1ff, 0x8001, 0x1}, {0xccf, 0x0, 0x5d20bb9, 0x8000, 0x6, 0xffffffff}, {0x0, 0x2, 0x6, 0x8, 0x4d6c, 0x1b}, {0xfbc, 0x5c, 0x7f, 0x2, 0x1, 0x1}, {0x7f, 0x10000, 0xfffffff8, 0xff, 0x7b8, 0x670f}, {0x5, 0x7f, 0x5, 0x7fff, 0x6, 0x8000}, {0x267, 0x40, 0xe90, 0x4, 0x9, 0x9}, {0xfffffc00, 0xfff, 0x3f, 0xfffffe01, 0x100}, {0x6, 0x8, 0x3f, 0x800, 0x4, 0x3}, {0x2, 0x5, 0xb6, 0x5, 0xb16, 0x80000000}, {0x401, 0xe16, 0x0, 0x1, 0x5, 0x7}, {0x97, 0x0, 0x80000000, 0x80000000, 0x8001, 0x423952c8}, {0x1, 0x10000, 0x19c, 0xff, 0x8, 0x2}, {0x3, 0xfffff800, 0xffff, 0x8, 0x75c2, 0x10001}, {0xffffffe5, 0x3, 0x8, 0x5, 0xff, 0x80}, {0x8000, 0xffffffc1, 0x9, 0x8ab, 0xfff, 0x5}, {0x80000001, 0x1, 0xffff, 0x1, 0x8, 0x6}, {0x9e, 0x100, 0x3, 0x7, 0x8001, 0x3}, {0x3, 0x9, 0x21b, 0x80000000, 0xe5, 0x81}, {0x0, 0x2, 0x7f, 0x0, 0x800, 0x7}, {0xc1e, 0x0, 0xfffffffa, 0x0, 0x9}, {0x5, 0x1, 0x1, 0x4, 0x8, 0x8}, {0x8, 0x9, 0x80, 0x10, 0x53, 0x509}, {0x1, 0x6, 0xffffffe1, 0x2, 0x5, 0xfffffffe}, {0x2, 0x8, 0x9, 0x8, 0x123, 0x3f}, {0x2, 0x10000, 0x7f, 0x4, 0xfe3e, 0xfffffe01}, {0x1f, 0x2, 0x1ff, 0xfff, 0x200}, {0x6, 0x4, 0x10001, 0x10000, 0x10000, 0xfff}, {0x20, 0x6, 0x2, 0x9, 0x401, 0x3ff}, {0xffffffff, 0x5, 0x3, 0x8, 0x0, 0x8001}, {0x8, 0x6, 0x1, 0x1, 0x4, 0x5}, {0xff, 0x8001, 0x1, 0xea6, 0xfffffff8, 0x113}, {0x7, 0x1000, 0x3, 0x5c, 0x3, 0x7f}, {0x3f, 0x2, 0x9, 0x5, 0x10000, 0x4}, {0xc7, 0x2, 0x3ff, 0x0, 0x5, 0x5}, {0x100, 0xf66, 0x8000, 0x1, 0x10000, 0x6}, {0x3ff, 0x3, 0x1, 0xff, 0x6, 0x200}, {0x4, 0xec, 0x1, 0x5, 0x8, 0x2}, {0xff, 0x9, 0x7, 0x2, 0x401, 0x7}, {0x10000, 0x3, 0x101, 0x7, 0x1ff, 0x4}, {0x8, 0x8, 0x7a41e47b, 0x481c, 0x8, 0xfcb}, {0x0, 0x2, 0x20, 0x8, 0x27, 0x8001}], [{0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x320c9e2fdb8fdeeb, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x2}, {0x1}, {}, {0x0, 0x1}, {0x2}, {0x5}, {0xb, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0xf062c47043f8c7df}, {}, {0x0, 0x1}, {0x4}, {0x0, 0x5afceceba2bc5af3}, {0x2}, {0x0, 0x1}, {0x3, 0x3}, {0x4}, {0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0xcdca3282391763d5}, {0x4}, {0x3, 0xce2fa009ed1626d0}, {}, {}, {0x1}, {0x2}, {0x3b12ae4a546b707e}, {0x3}, {}, {0x1, 0x1}, {0x3}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x729d184ba1be5b78}, {0x2, 0x77705abea58c9c34}, {0x5, 0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x0, 0x2}, {0x2}, {0x2}, {}, {0x1, 0x1}, {0x1}, {0x7055d22bd5780dc4, 0x1}, {0x5}, {0x2, 0x1}, {}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x1}, {0xf}, {0x4, 0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x3}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x2}, {0x88fa5911eacc38e6}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0xae77fd60e9b2a653, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0xb59c2adbcdcf8dc}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0xdb74f2e6d711f259}, {0x2, 0x1}], 0x1}}]}, {0x48, 0x6, "f08fb06336dc54d8386c52d6ecca06c87c07e663a9d7445f3ff37fb775b39509df3b0350e2e6e2420808d8330deaa62ada792255ed50e65cc25fc93e3ab5b21c513996e7"}}}}, {0x98, 0x1, @m_nat={0x94, 0x9, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xd8, 0x8, 0x7}, @local, @remote, 0x75f536aa2a7329e1, 0x1}}}, {0x58, 0x6, "4ab3d59ca262e3047a0eb4eba0374794145de0b9077efb15cf69b95d6b67ef9c29648651a19ac164d7ded08ef4d0910c695a909a90a568dea7d3daf12a21cbc61881947d9cdc04979dadd09b0182ad0a08c1"}}}}, {0x1044, 0x1, @m_nat={0x1040, 0x12, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x3, 0x4, 0x6}, @broadcast, @remote, 0xffffffff, 0x1}}}, {0x1004, 0x6, "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"}}}}]}, 0x3f10}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000000) [ 595.542604][ T2855] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 595.572643][ T50] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 595.652408][ T12] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 595.782279][ T2855] usb 5-1: Using ep0 maxpacket: 16 [ 595.812325][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 595.902973][ T2855] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 595.911402][ T2855] usb 5-1: config 0 has no interface number 0 [ 595.917881][ T2855] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 595.927426][ T2855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.938368][ T2855] usb 5-1: config 0 descriptor?? [ 595.954998][ T50] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.966213][ T50] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 595.980245][ T50] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 595.989581][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.008763][ T2855] go7007 5-1:0.126: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 596.018966][ T2855] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 596.028756][ T2855] go7007: probe of 5-1:0.126 failed with error -12 [ 596.076084][T17631] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 596.076084][T17631] program syz-executor.1 not setting count and/or reply_len properly [ 596.253923][ T2855] usb 5-1: USB disconnect, device number 26 [ 596.562584][ T50] usbhid 6-1:32.0: can't add hid device: -71 [ 596.569028][ T50] usbhid: probe of 6-1:32.0 failed with error -71 [ 596.578493][ T50] usb 6-1: USB disconnect, device number 46 08:08:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x4) dup2(r3, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 08:08:02 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x2) 08:08:02 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2fb, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x16, 0xd0, 0x8c, 0x10, 0x54c, 0x10, 0x316, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xffffffffffffff72}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 08:08:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000100)={0x1, 0xae, 0xa3, 0x2}, 0x10) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000080)) r5 = accept4$packet(r4, 0x0, &(0x7f0000000140), 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0xa1e1, 0x7}) [ 596.752836][T17640] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 596.752836][T17640] program syz-executor.1 not setting count and/or reply_len properly 08:08:02 executing program 3: fanotify_init(0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000000c0)=@llc={0x1a, 0x30b, 0x3f, 0xba, 0x4b, 0x20}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="c254be2dab4e18eec6fb1fdc164514099eccb13f5ae22d3e11dd275c6bb2f504111bbaa5b99b15f6660b878c9c2378f70c2ae0a61f00dd532a9e6c712b4252762271a5b3dbdc582ba43a5b09a529c197836b25b5c267a3d912d189b46be85355ad70fe82e273a79a8a6580289fc8ae1c888504e9b7a6a4a35cae0d1917bb383222bcc0c3690e3be86c61eae11ec8bff4b79d5ed97bbb8cb1192a1a0d26c25198aa57cccbf9baeb15968534134244d2209632256f3557c8fb093ce1487cef709a411f79e6d1ab35daa8a1900431b70228877e980908690465c5", 0xd9}, {&(0x7f0000000000)="a314d21a2095084a7ca77cb0328128cfd627e6c03cd07ce316add5c45522e58ceafcb1055244fc60e2a8203440d7b2877a6c2b063a1f16b95f7f5cf1", 0x3c}, {&(0x7f0000001440)="a67c7477ee4ef7e12147ddd6e5d3a529cd429dec05a0ec13ea5e78bec436507017418bc4318bcbb59612177eb158788c424a11aa72b94185bed728f263044da3d7a28e52b455f195a8230dea6908b0d0a7080fc1a202b1f72886214613527b6396ef9cdb6aec95217368bb19114c93034bcebf257f3534451ad90d70c3ce5cb14921e33e9637303776637b87d96a294cc8251ec0b0d029d27a64100bd86fe597104a6ea6d78a262e3386f2ee4b4020ab624abe87d0359e58d6e5a3669c3f7e2095407f3d3a35a41d0b414fc76a94a086f4894ba28685b3d724fa27f4175ae6f96a97a1d7d0d9f2d0d81439ba1abf8f2de06cabf785d7bd7cd699cef85cfebfbd2a353448db97e54b4d9afe246795d83aa76f9d94e2a4ddb948bf01b2a78ebe9a2b6f2b086802df169f059bcc4e163313f9ea45f99e587bd4b028b873c6e006917a1023ea6dc6786e310df016b85e232aba1db798f0800730f08a504cfb46300c3c5afd14d2bebd57b1c39b17ad1eda08ffb96794e895cc3b4073460e43afb8052e8d213648f0dae721f7323915fd2a665673e37bc2015de5f9dd07549aaaf3deb8b178746e20ceacb5ed0bab963eef0e36d9f88b2e5d8f10e6d92a964afa4e39c31d82f1a98cf662c2e4208bd3fd2a5f3e5dff74f5d8947d98c7ce00e194afaeadb7dbe44dde527fd1dee63c8a9d8efa3cae6ac16d02ff62062fdc34c356a0d7a9cfdc4639a551a44e82cfa8a1fd8ec3efe2375cd05a30ee53b69e63eae8b515debc42b8b577ad2736ef3bb2e529b78d705356ec44397ec22d4cdb602171fbbffdf69b4a4be355dcb65948ecb39e928e0be73c29258cdc32ceb069e285fb45caa72f95a5e7e8612978cd60361fa16ffd4fda4603b5bfd1a7b529815f4efd8ff1498a7e9920b34b634d58f1f766bb3cfb50403893f08a7699bf4ae9953d62a10208e4c597d1b397050907c8715d4a7b9ae6c8721b761f18f632d6341ffd11a186fdd3b56378c47e0278a1f23ce2defd990782430226ddd2103cd055e45a30af7481229c96ac250f0ae1144ea76a0ae177d3cb788bb477b0cce3e1e9beab6f349f45ab54424c943132e8f91d2875e30202226857ad7cd8fe2789f1e96be81f1e23036f1f729274773b30a27d09f88b6faa9f2a5ec93d684fd1215de4520ccc232125112b26c5370956d76606f51fb09edb2ca9ee2122095f2b758552a4eb725cbdc3403018c00ad729ccccd5d1785e36ed3a44c4784ac4a2aae8798008c5de3b9b6d7ae2af0594d670ad51f5d075811089dc8f841df29b87fb8c06ccb8d76d4db60c742aa55a68f9a7a6af61a1f4618c5c20bf7db617d8e487905a53c3b78d57b8f5e3dc45d93477c9b9ceeee13dd81aa04065679df845ffbf76beb036ec9be32b2729b98cf201c4f3076e096be2859605e7649d5f98090b09e8e869e9525ee899294c40e6ab822366b9ee8d7ffc9b7e6a783e36839fdba5170c138f6722c41cc520a5590039723ac10caa7dbd69127f5c8103e4154a26f11002fea35e9da7391c617a0eaca790e721af089a6eef9bc660cf90d39929c4990f85b49bca4bbf8848ab09f027c773adaeae442df3a27a364c9ffb9d0072f0f92adf6b30c0ba2d7414a97cfc79f0f7ebd89a242c65327c6cabefc36626e8835703bc88b1164170410e7f78dad00047773e55d5f27f566afc599d499d5031369ac7581091e79d392b338cb564649f79025c55f0907364278ba6923be79104aadc2cf33b2d3cdeccca632bbefe885043a94d1867b617f22896346c5fbca916699a843df10446cd84879eeaadfb6e122f0e1410b059c634cef9ce619c68b605c478563cee0d8b919e227b3d2da1af471ede1eb9ff4f71451f5d244863a780de0b837791628fd7ed1886007f1e99903a5a30d22451a50e687f1f0de8d905c223575dca0399c646de243b0c0b24d21f2d5af68209a3dc11ad4ec1aab002b66cffc69b379f98af1613c09d39bbbf6d3074ea2c29cd5d74284b29d7133e084639e23fc80d357e763932559d91bd1ae92c5df2da2e6ac37ed0c7df4c6db86d99fcd95f73edc3a77adef2b327c09acd615e5b096067942ee10945d3276577502daf284123ebd6d5f95551a0c3f82174ebec26db1b897de80ba2beef55a6f3afdcf123d83f3553e4208e843fdea2a8960416110f1040339f93f8a85ae0a75d67641347f7b69e6e647311538c86eeb23ee241ea7c8e32242bcf4b63ab3e62e0a5cb9af447dd54dd69353b0c294b854d01ef9a81a3ff8be69acd715c831d6e651c7d319a456318bb8d3bf86c5119485a28bfb14447be17b99018c3e15c8eb44a42a871fbd3710296980afed5ca13e14f0a03efdf3a87a8e11d551828921d1f3da0d4b85665fa2f2770bb12cf8546398e4cb4edcac9617815d0ed66d4f9b66d2291b312f0f7025fe2068dca8f5027f776a8956170860e2131f19b1c5828ffc7bb37ced44f553440d2c5ee9c37bae7d0e273ca1da61319bd0f023b2bd1bd4bb2bc889bd3707dded8122fff4c1300fed51fcd80dc389b16950a466476f880997cec46e7364dabd76951c5863032d38d6c5dc2cb038c49530b8ffed7d839de32182a99d0e7ecc6a9816d5268ae172e0f6921df2d1cde9d95f5bc93802864a35eb7e40aab06031b273d7deae19bf5e421071b608b9061a95a74c9155370c665207be5c2dfc576bd9efa05c71baa6103d8cce1ebf1f08fdaf12b01e60a501e32ee5c45f78ae1fb63b1180a70f44230af939c3ed7300f1287381e81cd7f2492ef922e13930ed84527946411dc16cc8a1005c192f4b0e16de77a0b02be173b1851fbd8f92c1594270bbeaebae107aeddf662bb86296842be7b7e019d47ed3ac50fcd26d828adac5d6e214f3c853c6d816f4f09cda5b4f9c64aac499c90ffc72c606db643b9c9593cab88d93c842456292040334a4da44240ad126b9733cfcc04593905bd8a71f345af342ae188542978fcd7548d1586f6c20750276a79f4279d6dd50219fdd051f41dd3e9dadc2105674346064ee920bc16145c5bdc10e389f5d68b7f6f8074d2871748c8d83d27a7fc4c54d2b9c704ca4204efc326d4127f56a066b871ad85e6376d2fce943722167a69b83c5e35910c85fbef98b3d8e251c54e1ef8b9bb09cb5576a0f4acbdc5eb76ab38ec56d3445320033e4ef42aa0f72819c44f043a66acb4deea10a30dbdec062c334ae2fd1cf5cfaeb39fcb0ffa3040fb15a05b5be2bfa8b8aba6725959bdbf0b485b728d157876bee7371f29ec116737dd719a80b8a5f0c8aa8e4f295a8f185457e45fd81a3ae04acdbacbd8a17d7f29e7fc6b1821f39774ede53085cf0686eb291b7987a817075f6d432d1db426e7c4af93dc28e9f674a1e063566ac608279c42f4d099d908ec0ab3dd303e531a8601bf324c35206e68ed7dae206340155d8242e9413a83001cdb23d7c7b01560862f657e6c89aff091ec865d158e822aad650987989fc96484cd63ec62145f86bad8219c46093b9428ad396c829573d735e7563a59444c6a74afea6909002d8b5196261daf3598bb10bffe431510d402fb01e5a63af52af587a60aecf6ad5edb1ff48878426ddf185881c7be10bf512bdfd39853778c6af447e0d72c74f17debac52395bef81665b9f0a22f81435f576216cf86f664b62268c6bd3ad4d666572e0132c5111746d41459ef8879cd2867f73e1e46e26d35be06f16768a2c1ec09415541202432733058628aea9c9698b359537cd7c399122af4120ea7cf35632f268945285ad9af315b475e4ef6254957d3bc7340a80f178601b7b5914e1f02f446e96880073b22ec9b0510504601cd98e5c5d83f393f28071f8e114f0d60ab520988268228468f0bd8257b63dc88319c7c900df6f8667c651a98508167c661f68adc166c5bacd17d382bc78c2a730a729d8a568dfe5b300dbbf0082241728902ba261ba5753c0dc6263b7759e2319c4d844d731e7add37a641447197b96f210177afecc510f8057bf6be7d583e939ddf397e53f902e34d5865edd581723b42d1e8fe5bbfcaaccf81704767b77bb0a536b9f135e0f4e2d693cf0f93ec3969702c77a89813fc9089203981abde9e385dc80a05eb0848f599fa9c36d60ced3b57af26c73a968fdf2361378ebae3aa64ee54a47bf79b25ec7d4d3608130afc803d214a622c39f23a1e410d509608a9ab0f6b53098b201871cca35281d9433221442c1530cf0601c7ce9f412d9456b5b9c12ddbcdb7738bc5d71ddc83535e67c1c9ea0c889332ba5a6d52f3f26332979bd7b7debf0aaa7ff3dcd33afa5943f73bc902d583e23d46994a491c7455d97b39a533d90ace952f71c256130c6a3d7b3829f7eb0667477f1e968a2114db39c1109ca46fed03825965bebcb6f5551de8317c52e8abd02eec6c7efe6465c216e28f7b7291f758bf6f2d5c27fbe0e62722419e57260288ba07d2d46c2bdb8b74f83e8c3e29b12ddf8cb34fdd9e4704731db617189d2daba9f06f6b43eb4e6667403c92c9b5e65e20fb35f18c27e4b99fca10bc1c65d74118a26cb0919725808cd824e8245f68a91ea737e8153264c938ca85b450c0a429bf529ba21515ed6c75e9cad4ad8f8208829f13e2c2a14fd5539c18d8f7a710f6124d2af732553ad24983b1299d967fd94b31c1d07f0aa983b1419a901ea1373f01e5a2d067d84b5aaf45c4c4bed8adc31b6c7ea069d73dc3633a169baecc0f9cf6dbbe7daa7b8e6046c5bcd4a697f8fd5fadfb83b12271a633002307277076495f2f2ad2f6d87e718f80f2b409ed4f29de8a2c6a3aee6c8813897b822598bdaccdeb7cf38253633ad868be9f12a4a920f3974f8925a09d7334d4294ff3de06764ec7922f368c1b9f4316bb855086e116ae8d4db7d131c0dfe892831e7bb811a628cdbab771d39fac35406f47760d9bb845fb79007fa13b11c9e648416fdcf77ca5bf205821a6de436771285dbe66abac72b4fc864e5bfbea49b13179fb64ba189861b2751a416c337fb87a7d7d63aebc1bfeca783d3a6835dec9b0d2640fc2a9cb754012eddfa0a23d6c5105f3283c575773a25632f9b19e8cc099e0e9ef97b3c4d33b0de1976b84791cfb44677c737318bcb2cc5a2dceecd8188fa6d13f2b2bb7ba0b4e77a385b43dded7ead5d68b10c9530bfe1de131b278bb59f5898dcf7c7077d47586bf4436035d3ebf6b306742cc3fbdc3068ecda0b60092b68a190be090122dc9aa4a7bd7445570cdafd0d188cfa4864ed63be1398784830e7dfc5710031b0c3c1c36f3d7b2681e05b07310c1055629d2b352c9b6ce86dec67d888655c018cfe52c5b3ca009f872767b110ac70958ff0df678bb51511d9840eaec0245acd21040718cc2532a8643fb3fe1c2db03ce633e9d0f0afc0d807496d354a4b75e88af6c0f62caf51df3b1e531ccb8d150f36d655542a8d97cb320b1c69741ebb9e325b76c1056377847a537606bf82a52d8b60dbf316ccf1091f5f2eb887285c043b3f52184f0186099322d3d4108665d899a7a59113746f5d86ee69c1d059cf67c3373d6593bd1083d8018de3740eae8ef183e4cb472a77019e8ed7b7acd5e1e7abd583e94ff146662e5394e73166b8e8b95defc2be0bed7775c984e262a30a7ea777d1754ad60ca7a388cfbbd26359a3f75372a78bf17613dfa439e6e1fdebc8249ac36268d921f8d15e17b16a989ed0f91f585c9de7184234866547197499e9b88359a1217fe680ca2e8c7cbf2b0d2ea99e172425caae5bd94cfb34187fba8ce85d5023cab304c6cc7faa47f1cfab2d", 0x1000}, {&(0x7f00000002c0)="d3a7484eb564521b229495e80815b8f1c3396005aa510df187233c490a6697413580aafe8b9c1a0ac2a84808c054dd05f1b74dc879b0f63569a348e848abbf13f99cadee2216ba63cfffac3ebad9c7859f9c364b356de521ed8745d10a8c2766d87f7b8a1922e69f875fb15ce23fd09c5b848ebc46b5e5059eefde61ad14717760d71c72cf619b66869aece1589da1d8281d02e8daf62326ec936f393a3e8855e4917161c147fc21acb2996ad6ea50bf67ebeb2649fed557405a0ec1e6a55502af3c743a2b233900a76f749ac1ad94c3ff19112c704e0e847360a66ee14ea6e617b4b9f72eb1b10e52edc05cbef26a61", 0xf0}, {&(0x7f0000002440)="f1303b35532c4129d41c2913937cbf379b71b3335733ac4dd0382bcc57a39ea8e8d5ddcb032bce042a78f8f5207d784e72df2e5fbbb2ac7e096a0f6eaf0d5bb35262cb4f1826ef5985eff43eadf5a17725cfc21e2c80b51831723f6cb53fa8ed8c29406ad72e5d14bc74912e1caf2d34027d40894e960c42e4036503e86b3bf700056d98ed5f0a04dee7421ac3b2277598dba5e49e8cc74be39dec6689c7615e25", 0xa1}], 0x5, &(0x7f0000002500)=[{0x100, 0x10a, 0x8, "9c8d5f6ec960e4f74563d6fd717beee9a2a2f53ac3d4df96ba61285b5acf1b069162edc5d7d58c04163cf56dbb283e51a082db687eb721320e285d541f9c57810b0788a139d3f0e7166a241658201b30eec0619bb7806de0b5476354126412ec78d8b4d0d4751b352a2df1f9b6ec75fb56e12f6dd0cae5c2cc4b1dca578328f48bb7ea1c5b42131d9f67eee2fb519641fd5ecf3c0ebbdb7bddbaacb3092692d5d80a0e2caec68431a6aae56d4c456178a9a63ef24f6d651d4f6146aa042f405c88f6a3f17b5c8c6bc3461cd22d83f1550f33de538b321172d2554d4b9aa63869163a829d1f775a95a712c5"}, {0xe8, 0x10f, 0x0, "db4e41d5af948f5cff5f26744f803cc155046f234bbb9e4286e1cf22e8c2cc54ea4d6b3d176e6324d7546d652dbc1720625c3f471643672bf72a9f954ea9a3abdd747be378ea0ade3388166e13523c03e53ebc1ef081faf5f7c47484f3e27ec560bf845650a5639eae05ada25082a897d82c207a201e4ea4d1cbfed89f22b3a62cb67643ec13964eb99cb26f900c53a6d1725536660dcb5f1a834206b727392be0b573c30e493d88e1694afbf58d80ee1c0dc93c39789e1d6aadf476c93a4a6102f3c55a7ac70f81dfc220af4417f126a7a0"}], 0x1e8}, 0x94040) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0xd04aa1aacd574bf4, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:08:03 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) [ 596.993223][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 596.999611][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 597.006208][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 597.012708][ C0] protocol 88fb is buggy, dev hsr_slave_1 08:08:03 executing program 0: gettid() r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 08:08:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00002e0000002e00f415d22401e24a1abb00b1e1c921ae1a480572d87355ca88bc81000000fbb245cdb0a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 08:08:03 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000080)=@sco={0x1f, {0x3, 0x4, 0x81, 0x0, 0x4, 0x1}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="51471c442993d103e8edbbcd7672dc7befd002c4e45fb325ab4ee7afbd466b56f409ab23044a6f70392d86a2f09b0a0b92274566ce4614a89f40397372c3271133edd28072c1d55c8394f8f15dd03652399ba2ebd19dd26d065110e82f341b58868309c91d5e5ba3227c7255f3e9c05e81e8c5cf99e40f88456e394110d49ea430", 0x81}, {&(0x7f00000001c0)="866bd45762821defdbcff675a3a6b5aa604969598e78782d4f287b104658bac5915d7665e91635eac4f39f268c9e564dc1ca9285ae20d7b53318106232bbee7e0ebbbfce4945e8b54a32a3fbd7b5b6a66f18e2d781c80bd0c5a26e35f33a8e7b71a94a6d0ff5cfc4312be8b513bf0862f45573fa29ac4ce5d8cb676a3a7a444a7a56d441eec16f5d8229f7453a04a3d7a50b752201224e2eae244ba48c96c19cebd9447d87a10cdc2d2ae4286dacb2257cb14387c97bc561568e6542a4176b26a5fe95453eea6e", 0xc7}, {&(0x7f00000002c0)="a4e2d77cd65c8fc2073ec8b5bd492b56654af8f6e2af4e7f3e4589422ab9ccabcbd2d44785304e432f788533351923a5e49861a4c805741af652171a2f76e9e49cf89f93b25254e9c7e515bff6ce20e6a9242a14bb0105c7cea417478a57d817345eb088a90accb48a0f189a", 0x6c}], 0x3, &(0x7f0000001440)=[{0x30, 0x115, 0x4, "61b10d8043baab45e1fde5af5b2e6d7a4102ed3172966b41d0e311e752a3"}, {0xc0, 0x1, 0x80000001, "deea8b16b4b5e833343d865833c235ba1495bc0b2c3268ba21bddeb1acdd6766c3ea8d5629844010d296ef8b199032c9798c85baf820000cce05393809b3e188250a68a7c60ebd1261a12a6dd244f9e1f4feae1c509eea48ed78fbca05674501472ef5c826baddebda29ceb3eef62af4c000ef60c6ef2b848233bc07d2541bfabac70f01a5e99371f2e7003701c0db7f6a8a7abeb469a50cd626b42eb077c0a60a964c89c39693518ea23910f6d0"}, {0x68, 0x103, 0xb81e, "39e3c0cc008c9ed835d5f5282fb98bf470bae1b952c6692758ac8c8aeffe842dc7b4259507a8a8afe364d0eb4e9018594f767458ad35c602c4ddc31fdd0c418de0e47698bc479b0c5faa9cdad65698e4b9b2e18c746f48"}, {0x90, 0x10d, 0x8, "c0618c08d65f4f91da52407054d6ef13de9855e4d1a64d2472ca29c61cc89386f145e86fe8a567917ae80bdd94a8a76efded700396b4b315d6038dd692cc1322e5040143e85322177a4b372ec64462343fe1894cc185ca0a157c4c485c53c6f828facdcc650c6483c81279b2315707ac5feadd97a6a1537f2c8b9f4d2011"}, {0x58, 0x0, 0x7, "7ee46b6e2db51970558e2bcdaf95e2cf01810157d30edef3ce4cbccda3e71b680f013657dcaa04a132d9a37c4f0bdc1dbf181fe2fc6457c6440167eaa00a99a0dee0c1a312"}, {0xb0, 0x0, 0x6, "01fb7eff613774b552ee0a27ab011f8ee7da9cbaeefdf3eab20bf9329ac20e6ab177f12632af6ecc42693a8b964024d2129438d6b88b6263634ff77050a7317eb142e7d3842a001bd011c447b1133f208f2660fb9b5c8809636a022c3a13eec18bf323f07b453d133140abcc5a8fac6968fd0938ca5deb00d657a0189700f4805580356cf40c77f03f9ba5a474da17ae4f4b254ee238e86d562af17359511f"}, {0xd0, 0x3a, 0x7, "8ee710e8ff4e68613d3eec40788de4295951618c54048c5c2fc7d1e469f7ba81b657d659c378bc9dacec5c2b2686fcd41dc20cbcbd04ae0b9493836a13e47c58bd2c936a8b50b1c6b0310b07e2346617a2c46cf1645ebe0245eab6e8584154e085ce6384e7058636944c0da29b486b85385f1e4cbe2b65d961e94d0e8d552dcd72d8fabe389a443fa6a021e0bea4df8724238c5100687c7f9e1e27d43cb9291889e4fe19f85614e2812d36639c845092456a727d771503fd53453d"}, {0x60, 0x113, 0x7ff, "6b27cefa47142af7c613cc1f3ca3912907341b2732fb8369c037e3a8eef64f855aa8c1a5c1cbfc8bcfd8f18a761b273b211974ec6babcb6f5e9c13615cfeb8b17e6e8fb2762793d75fa9feeaa69c"}, {0xc0, 0x105, 0x0, "c92d5b9549e0761b07a766f59728cb2cfa623fa398de8d82d119f935b87eec7f24ceea8f72c92288761d0e45b5c11a91db439ac3390bdfcfdd514f7e2c18c695d6843069532d22a43ce6b059e39e72b2a96fb19b1219c9d488b796a3e0b0793b39d2f42dc234da9374db97402ab892f65fa7155449ca15b70458c6821d44156b24898c0d2d5c99085a5f60c23a78a67f5271767f7adc98580f61818f6ed852d63e9c6c15739c06fdde9a0d343bfcc8"}, {0xc8, 0xe, 0xfffffffc, "e16d61009e62606076a4bd400bd4b3945ee7b8b7a7334f207500c8427b45d0c2e6cd9c9320a29db53bb76282151048f3b42fd961c94e744bbf43a5a15e0af7b33bc4170a75597a53061b60479e9473690d62076a45f2953e60cc9c3c145b020f180bc7a006b47daf8ddccdf767dc6da1eb42a9164244e091cda70b4bff8d311e23d61fc35382c38773410d1c3e8ff7b9fcefee27e5bdbd57b97fd304b894c2da58f36800450b5e8bd566817413c1c967ac4d59fcdeb1"}], 0x5a8}, 0x8000000) [ 597.172579][ T12] usb 3-1: new high-speed USB device number 71 using dummy_hcd 08:08:03 executing program 4: r0 = getpid() r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd28, 0x8282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x520c, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 08:08:03 executing program 3: socket$l2tp(0x18, 0x1, 0x1) r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0xfffffffc, 0xc3, 0x90}) [ 597.432312][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 597.522321][ T2855] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 597.552632][ T12] usb 3-1: config index 0 descriptor too short (expected 65394, got 745) [ 597.561242][ T12] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 08:08:03 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000080)=@in={0x2, 0x4e22, @multicast2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ee3c1bcd63a2b3c51893e3d8f340a73d5be586536ce75ba0c02fbb9f8ef4e48716df41f9c67adf5f186e996c8c7257c0a4604ed5a481fc0a8d34ee56ce6e2c3c4a6ff289ef91324a885ce9b642d8319d900f40422e05134ca51edcb09b749849ca1b48ec3950cd4fc1981a91145b016c0ab9b24d200cbc182d6e4e94ee8e432bec7f73b2e6c259be71d3407703b7c62784508ed9670d6ca60afdf1d6c351c8846bdc3df714576c760bfb6efccd26e9605866a12328a901d9bed6e1c49e727f1157b1cbd6cae2fcb706d75f93d9aa19a8b13e7d45f0b96d9faf80f75e937177270ff9", 0xe2}, {&(0x7f0000000200)="47e37b481fedce540fb6121f6993d666aa1fae2b97f810ee6b061204d54cef9bd3de52ecb57cb54326ba3c259b2a4b5899cb5958fdddd11f9337707fd8b1ac7dbb75982fa2e021733717df7c8d2db221d5fc2cad62a75b25c29694f0d595ef3c178f8af67df5c4a4f46fd4346c333a7720e9290c535ff8853b62ec28ff8f2e87c80eddb4901b355e559df9bdcf10b097aecf10c321bf42ba556463e5121fb9557313c23758c18417e58d04d8aa5e0411f1cf926901a941fad7854d6c07ee6cb445be18c0c11a83b84bae13b49b8578a72ce5f45356", 0xd5}, {&(0x7f0000000300)="3607b7006b6b804e81bc6cba5dd788dd3e07d099c9f403ed216f4e40660ad632cf65ad1e662ca30bd3a5f971cacdcaf18be78805b2e7c0db0207d7bf68006a742ad32f532c2e1c6fb093635c56715873413f6c37049e7c963aaa14301e4db9b63bd84c8ac8dc56da25196ff30bcbdb4f91f5cc1978fd158c5ff9aad569ceeda6fbfbe956eb7b6d7f270e4db42f664c20b4e030d7b6c00f61f87314cb8fe6356893d75d10503997dc2ae501bd", 0xac}], 0x3, &(0x7f0000001440)=[{0x80, 0x10b, 0xfffffffa, "ce0c6f2fa92a42ddb3d9fec9d62a770de77e5c8d4bb5121509c334e8c43b517da0f625ae8ff24321d774cb344d96433b57ef52b8ec1a2c74155cad4a1c72c89164379d72b5f75095782efc88bec9757ba68d6ee77290ada31270b3b98b8d0a99eadb08f2c617216af4"}, {0x98, 0x114, 0x5, "de0e8ef8f7e9fdad4093b07779aff762a0911cba10536443a9fc18477912d32e65ce905e8a2c95f55056c6708a513a3d1a0fcbf252971d02da695e93f2b1ec90b12763cfe3898a070ecd0f48c5c8efeb6a5f4dc6b805c6c6bdd25d6fda42c9c23823fd5c0d1b53eac2e2189ed539e5ad4055b826c7e40524a65be23f4a5fca4745"}, {0x50, 0x88, 0x894, "fe9bc04be5709cf896835bd1b78c7b9871ed90a3e141225a4007b0eaac27a3bb4926b8b30e4ca706de592325dccbdc741decea538461185643a805ab6e7f"}, {0x1010, 0x102, 0x27b, "d1e580a545f452d2d00b954a53473fac206d98863ec84cb1a2c7f4108824906c0effa0cdd1429c8d09aba425439eae118dcc95da49e2ccc2d9e5134664f1ec19f5d86f903a7111e659ddcacdc4eee9bc5128fd3ccd683063120598158b9801759ed882dd44af11c6f84ed2c2ec601206c88bcde23218f767e4f6c87c01f0b6ab19a0b4413693bdb65bea344ebdb7ae8798d565469aabca2dad4dd18c614882063192ab0232905606b396f892fee9a4a03c968d547b7e1700fb65346f5ac5d59175b74a177749ca760fdcdb3db5709399e730b136500240da379fdd2b7845bc752f11ba7458ebb073d868ee7c7ebc9f68851d4fdfa704042153e75cbe28a67c3fe2d653802a37d7a18469a139eb4b69e8f2b44e4fb2b524fcfc12e94824521016d6977a80049b569867b4ddfdd4bd0d54a8607d40c3f6f12c7f4dcd7b9a0fd3fba7d108ecc99c9ab9dd055a29a2113b088bbe69d3c7d7e4c7dda97242fcc076a885c7a4a3c93b50a2f3c0a8aa853e518c02a8726db94da1d7dd19b9c712f9dcedcc0f6aae05b4f705f5dceeb27aaf314a5c911a643999334fd215fb87b30161aa9fe04e771ac91198bd0bd7fe225798d8cda11dfc3c70ab66d1a5e98fb001c40dffd0893f400b303e64ca49befa62d3a2a0bd7c130663b329c3d695e0037c2e66f6560bf300133a63d894acf87e63079e8dcee6f45a052b062bff2fd382a362fa4bc467afa9ef492e7d76b758b763420d708a5a927fc6f82387f4069ad06ea73ba07e2fe7c19f46c8dd3e3543892b03fbc2fd3b35ca2b5309a6b35be3dc2ee03231733cf15eafe145b1e16524be42147f69273e509818e8d7e1591ef73f8fed0ded0c63afc819aab4d272f4c68a3b6c96151e4de26b15edf26ae8d131cf16ab608ca37543b055daab82823ffd65c00b6ab961e9b491d277d0ea092252a466c82623cb2155d64a7f8c2c9de3bf759dbdb2d39c1c1be04a2c239e5620639623cc36b1507f61ab4d36a3b4a467d5f0c2088c99cdb2bc57377314352d474baeb10dec4355ffb3a6c4190f14f8245298b103c73b5c9da69ecb40e7b1aa210e41006a383138d11985b10cde9c24922ebc26439f91d918e32dc0f04594b1e6111e8cf4b7c4bba1d1dc4a3c08006331bb0b63078e6b51b580e9027a7e67bb69ae8845a0330c7d7293217b9e2b729530daa07b96664f8052e4f662d1342c0da08ecb3b82f655bda769876fba6c4183930a43a978dfc13c5c1665ec16a7c7bbbb18189b51432e909f517ec1ad54a748e6a5eedc6b53c009e3393aa1825af850fdda0c38bcb33bc14eb3512b8b54d64533c563df6f54e48d9fe82dba115c369fe0df80ec45437a7740e55731ed20e44601a6a1e8b0cfdf23bd38af4d2514bd6e6b7acecdafd59c037bb8704e3d68f123dfc1fadffc6a7d5db9384cda14ec250f7fd754f95ca3a789d3b76fb063fef288a84365d9d937da4e340e893017dd8486b342308034426f1a1859ef5dff540fde6fe174f12f947541cea834907400de9543353839c9fee57644b6932365531313b4e71190e42d01f372cd994c81ca2aa268b27d0376e22ab72ffbd33f914eabe36657f10d49f380af5026307f924161471d6378eae4185ef1231db6acb4f4e5fcff45431b96144169c5697cd1cb5407022bc2d4cf0f9cc6fdfa41e91ce6333c5e74bc1c20b826da7a12e6cc39036cadf43d725550ed5d61483d6702d76fe4cf2b656b1bed835b62c75aacfb45235808b577d0bc4d483c7255676d8e8af8a897fd6bd13bda37693785b80c8ae71e287113768428c3061f359fb29083cb67418908cff57411ac2f3fc3a5b4029cd3025412eb3f6632108a875ab0e05cc0d4cc82ec5ba404390dcd0f22d670916271358157291e9282dd72e975f4756d4e9f88f802e8dce63c00045a821de381d40b17fd3421f5e77bc91665d30cf77ea52b1eeebcd025d8c0a207bc429a5cbcc384260092f584e4e6c50dae22812c716d8893a4930328c780794f6914710c1f302b1caf4eaa878be44ea392b4fde7e41bfd3ee938ddcc3d6a355e1d18e1f1a4bb511340dcec3ff89f170de481e4995686a545ef41ff801ccd30ae99bd5ea254197f36a08b437d076d30b1eb0119d86da999cba0ef5b66ad28a00945568fa20f10e4f1f895d7770af88d732b85390938153cf46da4d9d9649717ebacd488e04a95289ee06ae850e1ba5527a780a9fde5f0bcb74856b98d271702efae45935f2d81d4923aee662a71b30ea9d18bda47bececa6259611824fe8eec5bd0a3ae414f813ac59878da3cd642dfa78e2e3a8c93e5d2fe9fa57787cfc1b3a3659ae195289683afa4a2ff01a50d031222d49c8ababc1894046f736a75147b3b4f7dcab6bce56d6628e8c83b62907e5ec6aeca043085833e2f6336bc18701150960581963365e528e051ea5bcfb34d5f164c14b5303509fcf7a733de4d419398bd34a81519e8c8078c0da4776b00e58f9fbcda154f090d64339fd087989d81721ab16a95aa39fda1cdccb12f35bcc56606409878bef544204f6d51f397c21f67ee3d6c05423c81eae9aa172f2a51f57933e93c8ab7b979f8c946d5033d6415b7ee012ca5420948c56dc02776da6f53754516b221e925296b8fa5bfa204a81c452f8997642fddf63c76cfe541e704ae22fb8334310cb6c2c4cd686d4f4e83721f6b33e33c2867e727108be4deb9df4c3afe167a3d55fd62059b0046033ab3db1335f9452dec2bf29aeb2e8d06ec538765b044f237045c6e666910c5af786395d9e0e4924bd83c9c817251591e37e1867623a2fdff3c5f84d3e5b077c31c72bb09a2b1a9d079b55c098fed2b18c4124f42ba3e611a82a17b6d9a90366bf8e5504fa311c9fa457a25bcb3dd275b6be741142617984fb1a777e6d9ab99ef9a6a1be27fe8313c340f0984fd3cad4a93afcf03e9d2d7c28be881712be82b33fc5bff8e36928c90a437f01a830dc4dc706e1500b907da9a4edbd4e9b4c827d49e7b7998cbd4b8c132ce172200661dca9a921c47cb6892d07a6bd263e150a949d9ffef5bf683637fc63555a22eb5b84f0aa3aa199f1530c82ce51f2f7dca190cf5bbcffa7f9175a7bf2a8f9df3022ab7b6485cac9e104004fbb78e4bfc04538b95d9af57085e8542b83f2107de434c9bf2570b23081b702630ab3a3c27e9d928dfea84ec1004372596bf0e2876e4b21cd01f85ddde3e3b638d914960790357a12c404d9ebf84f51efff008a45663cc98fc764317fd6e15fa7fc9b85520e9993fcb7d37d71aa7aecbb496d05738c40669a2e7ca322f949e62723d0c002c311bfa8b27478d3892e7f1ab54ef0d7ecf609734e2ea9f4b11a7dc9ab19b23b954955d7af2e030b1239d85d34c7da2b666f75c9164e180d9634c76b776ef6690525ab48cb9f90a85376dd50cfc55bc0ef97fd39ace792344320e1b38402d1ee904b9f6b31f5b981bcbba72d274aa8cf0a440f47c4931141032b25fcde8961e43b3a42f60d38e8b3636756fe2f2f4051ae1453b9043fbaada3d9092f97b03ef6f4c939b1e64767657eb57998e17d24bc80cc892082b2583028b428c23f9c4aa28bce7ecd0ab32bad7236c278f7f2c358f070944f5b3a5fee3b2bcf97a6e5671b41b1244fb915024fb90b9ee371c4b2ba67907d12052f35a7917a7ea2b3969b508af8722db5ef16de3d8641717ce479bed5749e00dda6901cb9aac6a9226c18a9eb53b587c84318eb0150bed56bf6d4f01e1af0044bb06074849734e2c4b33564d4f5591c7ad4661690aa08185c0fbeca33d9ced645cbde3dd5cf9f9be8d6d80a5392c7c2e9a5cafb6d1c3b252295ab12bade12964c920159ff665094ea75e5f551779de6ff5e2fce9c9f4e42ee50b9684607d3ec17c1b59f3c906efdbb556d556c32b1e3a809ef12d3ebc57c84e1d32a5289b9e3fc87d158c88b4837fad475015e118bd4ed726a514783301b7b296b8ac53749d352c58d0ca172868de1dca2839e2939f1da50bae5d69f574389c7535b501b6049b06b5583f6cb6ea9a715872147fa1e7bca53f045fb13d3da93961df99bbcc5842613ccfab1f3bf2a8612fc19e44f976205b792986c0b8ab5a9acb18ed6a4d37cfbf9b2ffcc6108ab70f148e389b207b7d7b9221aef61528e4fca36c1b54b8f87992df75f5076c12bf91c1271dbe382814abe9f675c54da44dad9bec5006d0605e1939a8c05dad5d63ee4c1405c00a5b1b45fad2393d7b3956cb4914c54c740a435076bb60353fab5a1d4b9be9de150af8ba87a091609e12eb317264cfd597c6ecb3a4e3243c59f597f56c07375e1e4fbe9b6099e147fb86f8293a38f455d594067fec37d7c7d801ea4dd0da6c5082d571c4b78e073f870a5ad323e50a7f1d23e3184fe5ebedfbeef03c8ce482489dd468127d0d44960544026dbd207edd12a912e1284190a13e60376ee38a9c81a79c04741c13f31846ca71d497bfc8a888ee29c5595cdb42ba3319b00c7f33ffae49c920e496bfb6b547a6023abb07406c40ce71d50c3856e140614eb2ab1ca27794566affc24e5a1e84e1062dae7f669e46037eadb590212fe0cb0f3739a28b5f4ce590a7e9bdcc4b041dd13d4ef5b5c14e17224d421cac8ba784892297641ade3cb789b2dfc601b7c56c550aeed986cc7966b69e64fc8a5a5ca059b2179dfb52c66149635ab5e8eeab1ef2a698b418888318deb0008f47514a2d57888f506e34448ae87cd500cbab06e6f6e4553aea8f44528c1eab570d2f63bfb0a879a9359e58a4820a7d24a744c43c0d6f310d1de7dc9de6280a95f81a84f249bdd202979a618139863cbac3a3f512cd278fdd111eddc95c45e72b1b8025e83cfdd0a15b47a5943573b6c5d0b7f3cf8fe6c181e9044a507f79230375a04fb9ff744f3ba82728e60d7635bd75948a7ac22e4b66e9fbb9f5923aabe2894dc7e510c8cbf278dcbea17da7337649cd897b962724a3f0c32e0c80bfa4b0cd570214325f76e915303fc9aa43fb3931d470a427f53deb1c1258ce97ffa8e6321476562d7d27ad11afe12450ac1329492fa70a3b46021e6e5cb0df9af124b8624651996b06ac59bf73a3c912b0e93e0a80a716776b4edcc578779500a4dd0b407706243291cd3350f488ffd92caf0cf6201a943114774f40fc8b0c48652fb97d9cdcbaa915a6902b6da577fd7f0951917f13ae2c82b228d82ca1e06e705e0393c58e42e3a893e060e690a181eb4c26b326daf80b220750bf7f2abee31a5fa4c1bfa7305c74680a1ebe6d5cce8cbdba09baa2bc7620f32d4e523a0a0e4f06d7fbd6cbf95e4dcbcc0e86ff2d12a62dc32853be9c7ccf91737b670684fbd98376317ce73a87165b2451398c4ff1177e5a6515fd044fee67b65556ffb19fb67c521a7235bf56d312e062b169c2cd594d0205b7f57d83dcfc8e4b58b25fd2063d34582afab74274e88e7dbb42408784aef003676423d6b9fb611b0d8bc61655cd95cab20430380ecf68bb01300148df6adec205e45c2e216b5400c95b3e9d3d28396652c0744649b273a1075dd46fa31a18a828bbce6042c9be18ae868428fe0f51a2dbac6a37bcd3205c1db78a5d447129af99ab842638e27d70a4391cc02c425a5616e68ba185cb3cef1824acc8613f06e985fbb59f8d8186f1fb5b5385d822b6d58eacec7949228bc7afd473904b0aca7af0e89920ee2bdcebec4f5c73f9d149434e3cfb994d71edbb21fb3bf7b29f532d244c7620489744289c8a0bc8141bf4fbb4cefd799f2910de7e3d0d27d474f2e7a5edf8eda23afbdb1ca7fbfd783c"}, {0x80, 0xff, 0x1, "0af92f07057d8602e1a590df6718d851acc7c3ff2b347c47057c96824da211925ad7350a128efe6a3a572c2676faec7b13cfc700f0c69df2385b12d956ce7c03e1eeabebb06672680e5dfcbb496821d052e7f8c6935b7d5ef9c226d50d9b8832bc779934113c19d149f124"}, {0x50, 0x111, 0x9, "4fb1a1b6bedd16f46b3272f8a312486f38387a71ab189f19d50c397a246d12f81bbca3c540a5ca451eacf4967359d38e2ab335e93cd86f2c72fb"}], 0x1248}, 0x40) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 597.569907][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.580465][ T12] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 597.589577][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 597.603038][ T12] usb 3-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 3.16 [ 597.612306][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:08:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/190, 0xbe) [ 597.682659][ T12] usb 3-1: config 0 descriptor?? [ 597.727127][ T12] cdc_ether: probe of 3-1:0.0 failed with error -22 [ 597.736160][ T12] usb-storage 3-1:0.0: USB Mass Storage device detected [ 597.741234][T17682] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 597.741234][T17682] program syz-executor.1 not setting count and/or reply_len properly [ 597.781556][ T12] usb-storage 3-1:0.0: Quirks match for vid 054c pid 0010: 281 [ 597.789642][ T12] usb-storage 3-1:0.0: This device (054c,0010,0316 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 5.4.0-rc3+) [ 597.789642][ T12] Please send a copy of this message to and 08:08:03 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) r1 = syz_open_dev$dspn(&(0x7f0000004300)='/dev/dsp#\x00', 0xf6c9, 0x44000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000004380)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000004440)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x66eb66835c6bb195}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x1c, r2, 0x4, 0x70bd26, 0x7c4f, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40000) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) [ 597.862825][ T2855] usb 6-1: Using ep0 maxpacket: 8 [ 597.936756][ T12] usb 3-1: USB disconnect, device number 71 [ 597.982923][ T2855] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.994295][ T2855] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 598.007521][ T2855] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 598.016755][ T2855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:08:04 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sysfs$1(0x1, &(0x7f0000000000)='wlan1\x00') socket$kcm(0x29, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x100000000) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000080)=""/73) 08:08:04 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x007\aa\xe1\xd7\xe5\xfa\xe1i\xaf\x9f\x1b\xfd5\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdef) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) getpgrp(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040)="b4b5d6cd1dc52dfb87a1664a33411f2c3ee4ec9dc82239bb26f7417219594cb40860215010b17a0eba12c78714", &(0x7f0000000080)="8a97b4ffe4460f542e08addb5af9e08063b30b1954c6631baade4b34a50eee14242892495f8c493aee276fe2dcb74e8ecede79b8e08da2cd2e89db12da6b8cdb2679e3"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:08:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000008, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001880)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="00002300000023004ff61e1b1b35cabd8939ae8040e96685"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = clone3(&(0x7f0000000400)={0x2000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), 0x24, 0x0, &(0x7f0000000680)=""/4096, 0x1000, &(0x7f0000000300)=""/247}, 0x40) getpgid(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x401}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa401101}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r4, 0x221, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xabae0bcec9dff63a}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x810}, 0xa010) 08:08:04 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2fb, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x16, 0xd0, 0x8c, 0x10, 0x54c, 0x10, 0x316, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xffffffffffffff72}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) [ 598.534902][T17682] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 598.534902][T17682] program syz-executor.1 not setting count and/or reply_len properly [ 598.602806][ T2855] usbhid 6-1:32.0: can't add hid device: -71 [ 598.609105][ T2855] usbhid: probe of 6-1:32.0 failed with error -71 [ 598.639353][ T2855] usb 6-1: USB disconnect, device number 47 08:08:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x1, 0xec, 0x9, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x40}, 0x8) r7 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r8, 0x7b07}}, 0x10) [ 598.752013][T17713] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 598.752013][T17713] program syz-executor.1 not setting count and/or reply_len properly [ 598.782507][ T50] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 598.881213][T12640] usb 3-1: new high-speed USB device number 72 using dummy_hcd 08:08:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00002e0000002e00f415d22401e24a1abb00b1e1c921ae1a480572d87355ca88bc81000000fbb245cdb0a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 08:08:05 executing program 3: socket$kcm(0x11, 0x8000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000001440)=""/4080, &(0x7f0000000080)=0x324) 08:08:05 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) syncfs(r2) ftruncate(r2, 0x1000000) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendfile(r1, r1, 0x0, 0x7e) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r4 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0xd0002) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000000180)="7d24020cb4c66d2b584df77b763f642877c14d1a92cd3ac5f7b97d922e5e50b0ce68", &(0x7f0000000200)=""/39}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0x8, 0x562b71270d5e19f6, @thr={&(0x7f0000000440)="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", &(0x7f0000000040)="cc2996dc9b967bd52260e82f15a5d4ad1b554668bc05d7977bc4bc3a0771ff1cfc0099d90f69d797c87aae33198095f9dec84b4080635bc5312e3e8dd030dec3e46489b1c0acad6f2173d12a51ba08699ad2786e36815f1607d1a586eb0c2ecb81e360ccc59c8f19f6cf2ca3ffa15680c149cea7aff4b8b564ef4d574ee32b6830c9422581e0b9c9669c3dad959eb72b"}}) tkill(r0, 0x1000000000013) 08:08:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000080)={0xff}, 0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) write$binfmt_elf64(r3, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3, 0x3, 0xbc, 0x8000, 0x2, 0x3, 0x1, 0x316, 0x40, 0x4, 0x2, 0x2, 0x38, 0x1, 0x1, 0x3, 0xffff}, [{0x70000004, 0x20, 0x2007, 0x1, 0x7f, 0x8001, 0x10000}, {0x5, 0x63b, 0x1ff, 0x8, 0x4, 0x3, 0x1, 0x7}], "9af25e2d0add629a819840592a9fe7194ce33e44f21835ddfbaa14a2c7eb9d7bc8ee45611308f3cbde4d6bb9ee4bfb10cdfe9c6a3ba909183e89b06d9adfa80e5630a5c7ccc1be37b24f457d5f1e1f5755294ab8ae24f38a7c", [[], [], [], [], [], []]}, 0x709) [ 599.032391][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 599.086179][T17721] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 599.086179][T17721] program syz-executor.1 not setting count and/or reply_len properly 08:08:05 executing program 0: r0 = gettid() r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x40000) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x8dd, 0x8000, 0x7, 0x9]}) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r3, 0x1000000) sendfile(r2, r3, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 599.132376][T12640] usb 3-1: Using ep0 maxpacket: 16 [ 599.162699][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.174197][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 599.187842][ T50] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 599.197138][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.209323][ T50] usb 5-1: config 0 descriptor?? [ 599.285769][T12640] usb 3-1: config index 0 descriptor too short (expected 65394, got 745) [ 599.294561][T12640] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 599.302883][T12640] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.313211][T12640] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 599.322393][T12640] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 08:08:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) set_mempolicy(0x3, &(0x7f0000000080)=0x1f090c97, 0xfffffffffffff1ad) 08:08:05 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x10008, &(0x7f0000000100)='cgroup$eth0\x00') getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 08:08:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x9) [ 599.335537][T12640] usb 3-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 3.16 [ 599.344845][T12640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.360755][T12640] usb 3-1: config 0 descriptor?? [ 599.406140][T12640] cdc_ether: probe of 3-1:0.0 failed with error -22 [ 599.413562][T12640] usb-storage 3-1:0.0: USB Mass Storage device detected [ 599.429762][T12833] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 599.496670][T12640] usb-storage 3-1:0.0: Quirks match for vid 054c pid 0010: 281 [ 599.504667][T12640] usb-storage 3-1:0.0: This device (054c,0010,0316 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 5.4.0-rc3+) [ 599.504667][T12640] Please send a copy of this message to and [ 599.511239][T17745] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 599.511239][T17745] program syz-executor.1 not setting count and/or reply_len properly 08:08:05 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="140000001d008105e00f80ecdb4cb9d90163190465102c2a956e41ee25d8c4a2ed5fbf4d7cb74f8e00f915655c46ae820ed550a9deb929736b34f4673217a0fa117cd9d77bbf78", 0x47}], 0x1}, 0x40000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r3, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x200000, 0x0) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000200)={0x5000, &(0x7f00000001c0), 0x8, r4, 0x7}) [ 599.636297][T12640] usb 3-1: USB disconnect, device number 72 [ 599.672647][T12833] usb 6-1: Using ep0 maxpacket: 8 [ 599.687963][ T50] petalynx 0003:18B1:0037.0016: unknown main item tag 0x2 [ 599.695591][ T50] petalynx 0003:18B1:0037.0016: report_id 0 is invalid [ 599.702773][ T50] petalynx 0003:18B1:0037.0016: item 0 1 1 8 parsing failed [ 599.710533][ T50] petalynx 0003:18B1:0037.0016: parse failed [ 599.716791][ T50] petalynx: probe of 0003:18B1:0037.0016 failed with error -22 [ 599.813162][T12833] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.824416][T12833] usb 6-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 599.837852][T12833] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 599.847260][T12833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:08:06 executing program 3: r0 = socket$kcm(0x11, 0x8000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000080)=r9) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x807) r10 = socket(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r10, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000500000000000000000200000000000c020000000000000000", @ANYRES32=r12], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r12, 0x1, 0x7}, 0x8) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1381) [ 599.968257][T12640] usb 5-1: USB disconnect, device number 27 08:08:06 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc7, 0xc2, 0xb3, 0x10, 0xfe9, 0xdb51, 0x2b56, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0x1, 0x19, 0xdb, 0xad, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x2c9, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x100, 0x61437f3af684f999, 0x2}) 08:08:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x2) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_matches\x00') sendfile(r1, r2, &(0x7f0000000000), 0x1000f) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000480)=0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="e375426e7d8fe22efd4f06b4db843966f14e1ddefaed9e566726968bab60082aef50a91178cede3e5d80254e902c8a5c3e2356936dca14211d257a6f386894dc416a656306d2551dec7ebb5a8a523cd37aab532532cebdb5fdf3fcdbee6aed705e3bfa287dea0a7a896efb4c4b048ce433c5d1c7ebef39bd51975f0ee4ad36ca55479035987112aa7fa72a682b1b1ef36fa72d429d2d92da1fa97845e55c735cf2fce6f0cc8c64760aec42c0bdfdeac873db0549fb926857c5d7a0a5bfef9183", 0xc0}, {&(0x7f0000000280)="2f5f0e2f5a2ab5f4c2aed0ccd32f92d265a7a217403b54bc49937feaff4d0ac1999f9e0db14c796b65f8715d0e39b617555604af29cea03089a4a05efd9c057347108a25ec56d4c34a7d374305ac21a315bc21c85c7add73eedeaabb096d9e31e056bed9948705cdec4f990145b6c929f2da59849b3deb1f3842592e83c708fa48b63dcd02690d453647ca1f52f071f3c1b528ddb18498b65cb1ba4d756ac5", 0x9f}, {&(0x7f0000000140)="ae751cc8cfa106dcb36368f5451c3977dd3e73e986aa", 0x16}, {&(0x7f0000000380)="319512eeb482f1e8155a0ed66fa9035da19a8bb047e795f7a9cbe6c148786e0f216defbf8ff9b52c6c874077e2c56df88476bba983c0330d6ef1ed5f33e183115e3b3cbfb8726dfd4a76bc9522fba394e039c49696b4768edfb31483cc213be41c5fc39b294ab8603be2d47d976b55b244d3322c212df020d8738f2d3b21dbe0749198eb3444292bac3a2067f72e298d26e82e29f397463dada794a4c3e004105e690c", 0xa3}], 0x4}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r7 = getgid() fchown(r6, 0xee01, r7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r10 = dup2(r8, r9) ioctl$PPPIOCCONNECT(r10, 0x4004743a, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='/dev/snd/timer\x00', &(0x7f0000000100)='net/ip_tables_matches\x00', 0x0) [ 600.255674][T17770] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 600.255674][T17770] program syz-executor.1 not setting count and/or reply_len properly [ 600.392798][T12833] usbhid 6-1:32.0: can't add hid device: -71 [ 600.399127][T12833] usbhid: probe of 6-1:32.0 failed with error -71 [ 600.422528][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 600.428824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 600.455741][T12833] usb 6-1: USB disconnect, device number 48 [ 600.562462][T12640] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 600.582634][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 600.582651][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 600.583050][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 600.589012][ C0] protocol 88fb is buggy, dev hsr_slave_1 08:08:06 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00002e0000002e00f415d22401e24a1abb00b1e1c921ae1a480572d87355ca88bc81000000fbb245cdb0a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 08:08:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x400000000000117, 0x0) sendmsg$key(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x1, 0x2, 0x4, 0x40, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0xcfaf9a97957bab53, 0x0, 0x6e6bb6, 0x6, {0x6, 0x32, 0x2, 0xd7, 0x0, 0x8, 0x0, @in=@multicast2, @in=@loopback}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x8, @rand_addr="7c2fbf33f991bb959822888ec2e41fdd", 0x7ff}, @in={0x2, 0x4e23, @loopback}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb8, 0x0, {0x6, 0xd4, 0x6, 0x3f, 0x0, 0x7, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@local}}, @sadb_x_sec_ctx={0x19, 0x18, 0x4, 0xff, 0xc0, "29b1acc7a65ee3d6e1c91c7576f7cf5592e84de7cad58087884cc435eea93ff3725273be7e42d360d32f95bf995bf2929100cdf20d8073443c4faaa9ee5b9357e321e9ca8ee2d1da1b8e40bf8ddd054759eed6c0133b77292429f502e4632a188471139d6364420e68f8286d016739135df9919e17d658ad975b11ea3452de99325b6213a48c96bbccc8bb88eea055fe59266edba0b9665089b4b894e9530c8575dee831fd05272c4d49274dfb90474c3d0a2635026479a2a35703621690d89a"}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in6=@loopback, 0x8, 0x0, 0x6}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr="a1d4689f4c9e74eab4d1bf22a998976d", @in6=@local, 0x18, 0xa, 0x4}, @sadb_ident={0x2, 0xb, 0x7, 0x0, 0x2f23}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x96}]}, 0x200}}, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 08:08:06 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000000)=""/101) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r5 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xeefffdef) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xc3, 0x0, 0x9, "02cd611550dc8527499316497ed0b7dd", "b6b245fd808aa4e88db0da724da1366cdc2c6caa5589cdc255d8daa22e9c8b3b9a2bffcca0bc325ae949586101c89fb34c6b59c83b8e56ce3c820bf936380dd5de288431349df4919aca1fcc3e27c867a013a1a1d92c3004af0893edf63185e0d66115c5f3bc8227b32f32eb423e071bec0c2aae04ec58347e1d914ebb16e1bc35a0449bbef4c5c9e2584f3e6c0acbe3c451e6edcf87fbdb2c9edabf81b9d1659c6781c50d74958c5a1640a80fc8"}, 0xc3, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) sendfile(r6, r7, 0x0, 0x9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 08:08:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0], 0x34) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x743}, @in6={0xa, 0x4e21, 0x1, @rand_addr="793d44c8e22b6ae238e188e82342b65a", 0xdf5}, @in6={0xa, 0x4e20, 0xfffffff8, @local, 0x2}, @in6={0xa, 0x4e21, 0x8e, @loopback, 0x5}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x6, @empty, 0x3f}], 0xa0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="4fa88b13b01c9fb7c92e623bdf5189ad047a06758173824756d68f2a6492e5c5dc84f5f437741c578f524ddb79a066000000000000000059b3dc07913a99de2744e327a3d11d3cf4a729683b393f4b672d5d9fafa99a504da21ac89c876a7596230babd81cdd1b45a6619d2bacbf02e72bb8211b685582bfb776c0050ef6fd2226ce2275905f9383729ed8f61e1ada", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f0000000380)={0x7f, "3d3d5fcfea74064c64b831f725714e54f49d6e470bb3ea6451bd0616fb1f717bd7b98fc5329d1a683c106fe22dcfe7905264a6c5c40f1f8714aa49c54875e995"}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r5, 0x80000000}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r9, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup3(r13, r14, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r15, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f00000006c0)=""/170, 0xaa}, &(0x7f00000000c0), 0x1}, 0x20) r16 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000540)={r12, r16, 0x1000, 0x77, &(0x7f0000000400)="e9778fa626e33f48b33a31ffc0d535a4c7884d92553f35ab196e0b028cff75770e73c0c3b0a2275fce201a3c2f27037fa752f4d6894e951a8ef9d3ae5adaae4fad8620216ff32382f38a0b118acf40ffb83798d72d7fae4b72038f0c5ed2b5bcdf8cb181cc0217522482a9e24d23dde83ed72b761f8e33", 0x9, 0xa3, 0x3f, 0x1ff, 0x4, 0x0, 0x80, 'syz1\x00'}) r17 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000001d008105e00f80ecdb4cb9d901631904", 0x14}], 0x1}, 0x0) read(r17, &(0x7f00000002c0)=""/172, 0xffffffffffffff74) [ 600.812232][T12640] usb 5-1: Using ep0 maxpacket: 16 [ 600.889244][T17780] sg_write: data in/out 1717986882/6 bytes for SCSI command 0x30-- guessing data in; [ 600.889244][T17780] program syz-executor.1 not setting count and/or reply_len properly 08:08:07 executing program 0: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ftruncate(0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) tkill(r0, 0x1000000000013) [ 600.942461][T12640] usb 5-1: config 0 has an invalid interface number: 42 but max is 0 [ 600.950833][T12640] usb 5-1: config 0 has no interface number 0 [ 600.957537][T12640] usb 5-1: config 0 interface 42 altsetting 0 endpoint 0x6 has invalid maxpacket 713, setting to 64 [ 600.968596][T12640] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=2b.56 [ 600.977884][T12640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.002990][T12640] usb 5-1: config 0 descriptor?? [ 601.054968][T12640] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 601.068779][T12640] ===================================================== [ 601.068784][T12640] BUG: KMSAN: uninit-value in number+0x32e/0x1e40 [ 601.068790][T12640] CPU: 1 PID: 12640 Comm: kworker/1:4 Not tainted 5.4.0-rc3+ #0 [ 601.068794][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.068798][T12640] Workqueue: usb_hub_wq hub_event [ 601.068803][T12640] Call Trace: [ 601.068805][T12640] dump_stack+0x191/0x1f0 [ 601.068808][T12640] kmsan_report+0x128/0x220 [ 601.068812][T12640] __msan_warning+0x73/0xe0 [ 601.068814][T12640] number+0x32e/0x1e40 [ 601.068817][T12640] ? __msan_poison_alloca+0x158/0x1a0 [ 601.068820][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.068825][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.068827][T12640] vsnprintf+0x1e99/0x3210 [ 601.068829][T12640] vscnprintf+0xc2/0x180 [ 601.068833][T12640] vprintk_store+0xef/0x11e0 [ 601.068836][T12640] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 601.068839][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.068842][T12640] vprintk_emit+0x2fd/0x8d0 [ 601.068846][T12640] vprintk_default+0x90/0xa0 [ 601.068848][T12640] vprintk_func+0x635/0x810 [ 601.068851][T12640] ? __msan_poison_alloca+0x158/0x1a0 [ 601.068856][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.068858][T12640] printk+0x180/0x1c3 [ 601.068861][T12640] dvb_usb_generic_rw+0x8ec/0xea0 [ 601.068864][T12640] cxusb_bluebird_power_ctrl+0x19c/0x240 [ 601.068868][T12640] ? cxusb_lgh064f_tuner_attach+0x280/0x280 [ 601.068871][T12640] dvb_usb_device_init+0x173f/0x2e10 [ 601.068873][T12640] cxusb_probe+0x17f/0x1030 [ 601.068878][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.068880][T12640] ? cxusb_medion_put+0x340/0x340 [ 601.068883][T12640] ? cxusb_medion_put+0x340/0x340 [ 601.068887][T12640] usb_probe_interface+0xd19/0x1310 [ 601.068890][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.068893][T12640] ? usb_register_driver+0x860/0x860 [ 601.068896][T12640] really_probe+0xd91/0x1f90 [ 601.068900][T12640] driver_probe_device+0x1ba/0x510 [ 601.068903][T12640] __device_attach_driver+0x5b8/0x790 [ 601.068905][T12640] bus_for_each_drv+0x28e/0x3b0 [ 601.068910][T12640] ? deferred_probe_work_func+0x400/0x400 [ 601.068912][T12640] __device_attach+0x489/0x750 [ 601.068915][T12640] device_initial_probe+0x4a/0x60 [ 601.068919][T12640] bus_probe_device+0x131/0x390 [ 601.068922][T12640] device_add+0x25b5/0x2df0 [ 601.068925][T12640] usb_set_configuration+0x309f/0x3710 [ 601.068927][T12640] generic_probe+0xe7/0x280 [ 601.068932][T12640] ? usb_choose_configuration+0xae0/0xae0 [ 601.068934][T12640] usb_probe_device+0x146/0x200 [ 601.068937][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.068942][T12640] ? usb_register_device_driver+0x500/0x500 [ 601.068945][T12640] really_probe+0xd91/0x1f90 [ 601.068947][T12640] driver_probe_device+0x1ba/0x510 [ 601.068951][T12640] __device_attach_driver+0x5b8/0x790 [ 601.068955][T12640] bus_for_each_drv+0x28e/0x3b0 [ 601.068957][T12640] ? deferred_probe_work_func+0x400/0x400 [ 601.068960][T12640] __device_attach+0x489/0x750 [ 601.068965][T12640] device_initial_probe+0x4a/0x60 [ 601.068968][T12640] bus_probe_device+0x131/0x390 [ 601.068970][T12640] device_add+0x25b5/0x2df0 [ 601.068973][T12640] usb_new_device+0x23e5/0x2fb0 [ 601.068977][T12640] hub_event+0x581d/0x72f0 [ 601.068980][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.068982][T12640] ? led_work+0x720/0x720 [ 601.068985][T12640] ? led_work+0x720/0x720 [ 601.068989][T12640] process_one_work+0x1572/0x1ef0 [ 601.068991][T12640] worker_thread+0x111b/0x2460 [ 601.068993][T12640] kthread+0x4b5/0x4f0 [ 601.068998][T12640] ? process_one_work+0x1ef0/0x1ef0 [ 601.069001][T12640] ? kthread_blkcg+0xf0/0xf0 [ 601.069003][T12640] ret_from_fork+0x35/0x40 [ 601.069005][T12640] [ 601.069011][T12640] Local variable description: ----actlen@dvb_usb_generic_rw [ 601.069013][T12640] Variable was created at: [ 601.069016][T12640] dvb_usb_generic_rw+0xd3/0xea0 [ 601.069019][T12640] dvb_usb_generic_rw+0xd3/0xea0 [ 601.069024][T12640] ===================================================== [ 601.069027][T12640] Disabling lock debugging due to kernel taint [ 601.069032][T12640] Kernel panic - not syncing: panic_on_warn set ... [ 601.069036][T12640] CPU: 1 PID: 12640 Comm: kworker/1:4 Tainted: G B 5.4.0-rc3+ #0 [ 601.069042][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.069045][T12640] Workqueue: usb_hub_wq hub_event [ 601.069049][T12640] Call Trace: [ 601.069053][T12640] dump_stack+0x191/0x1f0 [ 601.069056][T12640] panic+0x3c9/0xc1e [ 601.069058][T12640] kmsan_report+0x215/0x220 [ 601.069060][T12640] __msan_warning+0x73/0xe0 [ 601.069065][T12640] number+0x32e/0x1e40 [ 601.069067][T12640] ? __msan_poison_alloca+0x158/0x1a0 [ 601.069070][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.069075][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.069077][T12640] vsnprintf+0x1e99/0x3210 [ 601.069080][T12640] vscnprintf+0xc2/0x180 [ 601.069082][T12640] vprintk_store+0xef/0x11e0 [ 601.069087][T12640] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 601.069090][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.069093][T12640] vprintk_emit+0x2fd/0x8d0 [ 601.069097][T12640] vprintk_default+0x90/0xa0 [ 601.069100][T12640] vprintk_func+0x635/0x810 [ 601.069103][T12640] ? __msan_poison_alloca+0x158/0x1a0 [ 601.069106][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.069110][T12640] printk+0x180/0x1c3 [ 601.069112][T12640] dvb_usb_generic_rw+0x8ec/0xea0 [ 601.069115][T12640] cxusb_bluebird_power_ctrl+0x19c/0x240 [ 601.069120][T12640] ? cxusb_lgh064f_tuner_attach+0x280/0x280 [ 601.069123][T12640] dvb_usb_device_init+0x173f/0x2e10 [ 601.069125][T12640] cxusb_probe+0x17f/0x1030 [ 601.069130][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.069133][T12640] ? cxusb_medion_put+0x340/0x340 [ 601.069135][T12640] ? cxusb_medion_put+0x340/0x340 [ 601.069138][T12640] usb_probe_interface+0xd19/0x1310 [ 601.069142][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.069145][T12640] ? usb_register_driver+0x860/0x860 [ 601.069148][T12640] really_probe+0xd91/0x1f90 [ 601.069152][T12640] driver_probe_device+0x1ba/0x510 [ 601.069155][T12640] __device_attach_driver+0x5b8/0x790 [ 601.069157][T12640] bus_for_each_drv+0x28e/0x3b0 [ 601.069161][T12640] ? deferred_probe_work_func+0x400/0x400 [ 601.069164][T12640] __device_attach+0x489/0x750 [ 601.069167][T12640] device_initial_probe+0x4a/0x60 [ 601.069169][T12640] bus_probe_device+0x131/0x390 [ 601.069172][T12640] device_add+0x25b5/0x2df0 [ 601.069175][T12640] usb_set_configuration+0x309f/0x3710 [ 601.069177][T12640] generic_probe+0xe7/0x280 [ 601.069180][T12640] ? usb_choose_configuration+0xae0/0xae0 [ 601.069183][T12640] usb_probe_device+0x146/0x200 [ 601.069186][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.069191][T12640] ? usb_register_device_driver+0x500/0x500 [ 601.069195][T12640] really_probe+0xd91/0x1f90 [ 601.069198][T12640] driver_probe_device+0x1ba/0x510 [ 601.069201][T12640] __device_attach_driver+0x5b8/0x790 [ 601.069203][T12640] bus_for_each_drv+0x28e/0x3b0 [ 601.069206][T12640] ? deferred_probe_work_func+0x400/0x400 [ 601.069209][T12640] __device_attach+0x489/0x750 [ 601.069211][T12640] device_initial_probe+0x4a/0x60 [ 601.069214][T12640] bus_probe_device+0x131/0x390 [ 601.069216][T12640] device_add+0x25b5/0x2df0 [ 601.069219][T12640] usb_new_device+0x23e5/0x2fb0 [ 601.069222][T12640] hub_event+0x581d/0x72f0 [ 601.069224][T12640] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 601.069227][T12640] ? led_work+0x720/0x720 [ 601.069229][T12640] ? led_work+0x720/0x720 [ 601.069232][T12640] process_one_work+0x1572/0x1ef0 [ 601.069235][T12640] worker_thread+0x111b/0x2460 [ 601.069237][T12640] kthread+0x4b5/0x4f0 [ 601.069240][T12640] ? process_one_work+0x1ef0/0x1ef0 [ 601.069242][T12640] ? kthread_blkcg+0xf0/0xf0 [ 601.069245][T12640] ret_from_fork+0x35/0x40 [ 601.069247][T12640] Kernel Offset: disabled