, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@gettaction={0xf4, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xf4}}, 0x0)

22:30:09 executing program 5:
syz_emit_ethernet(0x5a, &(0x7f0000000700)={@local, @empty, @val, {@ipv6}}, 0x0)

22:30:09 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:09 executing program 3:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000fef000/0xe000)=nil, 0xe000)

22:30:09 executing program 5:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="63fac67e00", @val, {@ipv4}}, 0x0)

22:30:09 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@gettaction={0xf4, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xf4}}, 0x0)

22:30:09 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c)

22:30:09 executing program 3:
syz_emit_ethernet(0x23bf, &(0x7f0000000180)={@broadcast, @remote, @val, {@ipv6}}, 0x0)

22:30:09 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@gettaction={0xf4, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xf4}}, 0x0)

22:30:09 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000001580)={0x10, 0x2}, 0x10)

22:30:10 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:10 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f00000001c0)=@generic={0x0, 0x0, 0x40, "4f6d0888", "758fce4e28a2be2a3c7f18ea4c632674caa4608c72f9511f754cff59dc54bc64ad5c70bfa78d8449ee3eb1ecacab8d6b4d77b9b2b438f16527214b713bf63190"})

22:30:10 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ff3cf07e0b51891d2893c1c1e56b04a4598af0e9b60fef829571ad9b314883d754a96fe34479d3ff644d314000ace2fb47a5fec39e3398fa00", "4a456e93775562d8d447c5377bca9a2dd5908f594e64dff83c8192e8ce2aa4836ec694746605c77037e08b3e374b122e473633c2da1d4c4bed82201cb49e34e0", "3f1b931c12607d9e31fda0348400"})

22:30:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x4b52, 0x0)

22:30:10 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@gettaction={0xf4, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xf4}}, 0x0)

22:30:10 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:10 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@gettaction={0xf4, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xf4}}, 0x0)

22:30:10 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x5402, 0x0)

22:30:10 executing program 4:
migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

22:30:10 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@gettaction={0xf4, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xf4}}, 0x0)

22:30:10 executing program 3:
r0 = getpgrp(0x0)
sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0)

[ 1020.834348][T12930] usb 6-1: new high-speed USB device number 32 using dummy_hcd
22:30:11 executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x801000, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x101020, 0x0)

[ 1021.404370][T12930] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1021.414866][T12930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.422941][T12930] usb 6-1: Product: syz
[ 1021.433964][T12930] usb 6-1: Manufacturer: syz
[ 1021.438743][T12930] usb 6-1: SerialNumber: syz
[ 1021.486136][T12930] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
22:30:11 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[ 1022.174369][T12935] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1022.588062][T11807] usb 6-1: USB disconnect, device number 32
22:30:13 executing program 5:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1010000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)

22:30:13 executing program 3:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x1000, 0x0)
chmod(&(0x7f0000000400)='./file0\x00', 0x0)

22:30:13 executing program 4:
migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

22:30:13 executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
fstat(0xffffffffffffffff, 0x0)
mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}]}})

22:30:13 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:13 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200))
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:13 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

22:30:13 executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x9410, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

22:30:13 executing program 5:
clock_settime(0xffffffffffffffff, &(0x7f0000000240))

[ 1023.264299][T12935] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1023.271665][T12935] ath9k_htc: Failed to initialize the device
[ 1023.305877][T11807] usb 6-1: ath9k_htc: USB layer deinitialized
22:30:13 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000000)=0xfffffff8, 0x4)

22:30:13 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

22:30:13 executing program 5:
recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=""/207, 0xc3}, 0x0)

22:30:13 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/158, 0x9e}, 0x0)
shutdown(r0, 0x0)

22:30:13 executing program 3:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0)

22:30:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x48000)

22:30:14 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:14 executing program 5:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000300))

22:30:14 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200))
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:14 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_adj\x00')
write$sndseq(r0, 0x0, 0x0)

22:30:14 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x3}, 0x14}}, 0x0)

22:30:14 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}}, {{&(0x7f0000000640)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xd2}]}}}], 0x18}}], 0x2, 0x4)

22:30:14 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)={0x14, 0xd, 0x6, 0x201}, 0x14}}, 0x0)

22:30:15 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_adj\x00')
write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2d, 'cpuset'}]}, 0x8)

22:30:15 executing program 5:
add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff)

22:30:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000001100)={&(0x7f0000000b80)={0xa, 0x4e22, 0x0, @private0, 0x7ff}, 0x1c, 0x0}, 0x0)

22:30:15 executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
setxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)=@v1={0x2, "903dd1cf16a0db8172225d9d56a28f20"}, 0x11, 0x3)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1ae)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
accept4$unix(r3, &(0x7f0000000840), 0x0, 0x80800)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb)
recvmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000900)=""/217, 0xd9}, {0x0}, {&(0x7f00000005c0)=""/220, 0xdc}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="1d0000000000000001f7ff0002000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000002100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x12000)
r7 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xf5\xbf\xb4\b\xedcJ\x8e\a\x00\x00\x00\x00\x00\x00\x00\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r7, 0x0, 0x2000427, 0x40)
write(r7, &(0x7f0000000140)='/', 0x1)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6)
sendfile(r7, r7, &(0x7f0000001000), 0xfec)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r7, 0x0)
lsetxattr$security_evm(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000800), &(0x7f0000000a00)=@md5={0x1, "3d88e688516347dc50ae29e766c8c0a6"}, 0x11, 0x0)
mount$fuse(0x20000006, &(0x7f0000000000)='./file0\x00', 0x0, 0x91000, 0x0)

22:30:15 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0)

22:30:15 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000012c0)={'tunl0\x00', &(0x7f0000001200)={'erspan0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, {{0x7, 0x4, 0x2, 0x8, 0x1c, 0x0, 0x0, 0x4, 0x0, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}}})
syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), 0xffffffffffffffff)

22:30:16 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200))
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:16 executing program 5:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xc7138fde32648058}]})

22:30:16 executing program 1:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x6480, 0x0)

22:30:16 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000005180), 0x0, 0x0)
read$usbfs(r0, &(0x7f0000000580)=""/163, 0x10)

22:30:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x3c, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0})

22:30:16 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:16 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000003380)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000140)="48bd79a456a7c4c0fdfdcdb3d44bc4e62e5536c1448d734c", 0x18}], 0x1}}], 0x1, 0x0)

22:30:16 executing program 4:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x18000000)

22:30:16 executing program 1:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x6480, 0x0)

[ 1026.446309][T18453] binder: 18451:18453 unknown command 0
[ 1026.473603][T18453] binder: 18451:18453 ioctl c0306201 20000200 returned -22
22:30:16 executing program 3:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x2c, 0x0, "000000000000000000000000000000000000014d1700000000009a000000000000000000000000010400000000000000000000000000000000000000fbe16f66fac112bf00f803bb3e5e0b088a00"}, 0xff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "00000000f4ff00", "fa39fea01249b262ea53f500", "0001f700"}, 0x28)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10)
socket(0x0, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffffff)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x4, 0x7fffffdd}, 0x14)
shutdown(r0, 0x1)

22:30:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffc, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xff}]}})

22:30:16 executing program 1:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x6480, 0x0)

22:30:17 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:17 executing program 5:
syz_usb_connect(0x0, 0x2f, &(0x7f0000001680)={{0x12, 0x1, 0x0, 0x6a, 0x71, 0xa4, 0x10, 0x5ac, 0x225, 0xcd36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0xc4, 0x38, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}]}}]}}, 0x0)

22:30:17 executing program 1:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x6480, 0x0)

22:30:17 executing program 3:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x2c, 0x0, "000000000000000000000000000000000000014d1700000000009a000000000000000000000000010400000000000000000000000000000000000000fbe16f66fac112bf00f803bb3e5e0b088a00"}, 0xff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "00000000f4ff00", "fa39fea01249b262ea53f500", "0001f700"}, 0x28)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10)
socket(0x0, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffffff)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x4, 0x7fffffdd}, 0x14)
shutdown(r0, 0x1)

22:30:17 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x7, {0x7, 0x0, "3e96c93d9d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

22:30:17 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:17 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000581060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(0xffffffffffffffff)

22:30:18 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @dev}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[ 1028.024380][T11807] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1028.032153][T12930] usb 6-1: new high-speed USB device number 33 using dummy_hcd
22:30:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000004c0)=0x12, 0x4)

[ 1028.226776][ T9670] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1028.304989][T12930] usb 6-1: Using ep0 maxpacket: 16
22:30:18 executing program 3:
r0 = openat$vmci(0xffffff9c, &(0x7f0000002f00), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0)

22:30:18 executing program 3:
openat$btrfs_control(0xffffff9c, &(0x7f00000000c0), 0x141, 0x0)

22:30:18 executing program 3:
openat$iommufd(0xffffff9c, &(0x7f0000002880), 0x0, 0x0)

[ 1028.424774][T11807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1028.436024][T12930] usb 6-1: config 0 has an invalid interface descriptor of length 2, skipping
[ 1028.455844][T12930] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1028.468307][T11807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1028.478764][T11807] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[ 1028.488598][T11807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.494448][ T9670] usb 2-1: Using ep0 maxpacket: 8
[ 1028.503248][T11807] usb 5-1: config 0 descriptor??
[ 1028.614663][ T9670] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1028.626391][ T9670] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1028.636064][ T9670] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1028.650902][T12930] usb 6-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=cd.36
[ 1028.670533][T12930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.678705][ T9670] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1028.678770][ T9670] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1028.678808][ T9670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.707971][T12930] usb 6-1: Product: syz
[ 1028.712369][T12930] usb 6-1: Manufacturer: syz
[ 1028.717479][T12930] usb 6-1: SerialNumber: syz
[ 1028.726113][T12930] usb 6-1: config 0 descriptor??
[ 1028.735583][T18499] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1028.756554][ T9670] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1028.762564][ T9670] hub: probe of 2-1:1.0 failed with error -5
[ 1028.804958][ T9670] cdc_wdm 2-1:1.0: skipping garbage
[ 1028.818147][ T9670] cdc_wdm 2-1:1.0: skipping garbage
[ 1028.828267][ T9670] cdc_wdm 2-1:1.0: skipping garbage
[ 1028.853104][ T9670] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1028.874251][ T9670] cdc_wdm 2-1:1.0: Unknown control protocol
22:30:18 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[ 1028.995528][ T9670] usb 6-1: USB disconnect, device number 33
[ 1029.038098][T11807] lenovo 0003:17EF:60A3.0005: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0
[ 1029.235373][T11807] usb 5-1: USB disconnect, device number 39
[ 1029.246294][T18515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1029.261874][T18515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
22:30:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

22:30:19 executing program 3:
r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000002d80), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0)

22:30:19 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:19 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_getres(0x6, &(0x7f0000000080))

22:30:19 executing program 3:
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x813, 0xffffffffffffffff, 0x0)

22:30:23 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000581060001053408006f0d240f0100000000000000000006471a010000190581", @ANYRES64], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(0xffffffffffffffff)

22:30:23 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
setsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0)

22:30:23 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0)

22:30:23 executing program 4:
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000080))

22:30:23 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:23 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1033.796080][T11807] usb 2-1: USB disconnect, device number 80
22:30:23 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$unix(r0, 0x0, &(0x7f00000001c0)=0x5b)

22:30:23 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)='Q*i', 0x3}], 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x3f, 0x0, 0x0, 0x0, "cff5b94f8d64b596acbb6860e9f3ef6db0cf5f"})

22:30:24 executing program 4:
semget(0x0, 0x3, 0x22a)

22:30:24 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}}], 0x18}, 0x0)

22:30:24 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, &(0x7f00000000c0)="ac", 0x200000c1, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

22:30:24 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @generic={0x86, 0x2}]}}}], 0x20}, 0x0)

[ 1034.217571][T11807] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1034.494196][T11807] usb 2-1: Using ep0 maxpacket: 8
[ 1034.634454][T11807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1034.644839][T11807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1034.653786][T11807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1034.667775][T11807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1034.679097][T11807] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1034.688226][T11807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.734504][T18541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1034.755689][T11807] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1034.761771][T11807] hub: probe of 2-1:1.0 failed with error -5
[ 1034.771717][T11807] cdc_wdm 2-1:1.0: skipping garbage
[ 1034.780360][T11807] cdc_wdm 2-1:1.0: skipping garbage
[ 1034.786282][T11807] cdc_wdm 2-1:1.0: skipping garbage
[ 1034.796282][T11807] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1034.810731][T11807] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1035.230342][T18559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1035.239384][T18559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1035.586467][T12935] usb 2-1: USB disconnect, device number 81
22:30:29 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x14, 0x15, 0xa, 0x101}, 0x14}}, 0x0)

22:30:29 executing program 3:
clock_gettime(0xed85f399d1fe6266, 0x0)

22:30:29 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:30:29 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000050cb5320450c10108e492940a84409021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000000)='S', 0x1)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000002b40)={0xa, &(0x7f0000001f00)={0xa, 0x6, 0x310, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0})
write$char_usb(r1, &(0x7f00000002c0)="66f42501dba043a13d1f8a31b5518c7cc5d93f100c0f9e0356a8509cf289bd50a380c7bc70f87b128613", 0x2a)
syz_usb_disconnect(r0)

22:30:29 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:29 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:30 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x0)

22:30:30 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000f919ffff0000000000000000850000004100000095000000000000003d789adebd3a4e838a5ad00c21f97a9d6f55528c474cb385573d9f5ec0798d497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f0054fe8ead61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86ce453bc8964c32f955d410083f7567735a2ca15dbbf01550310a78644e80100000000000000d62c7addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c356218500000000000000000000000000000000000000000000001a"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3d)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

22:30:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pipe2(&(0x7f0000000040), 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r3, 0xae9a)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1040.254296][T12935] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1040.264286][ T9670] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1040.514203][ T9670] usb 5-1: Using ep0 maxpacket: 8
[ 1040.526165][T12935] usb 6-1: Using ep0 maxpacket: 32
22:30:30 executing program 1:
socketpair(0xa, 0x1, 0x3, &(0x7f0000000080))

[ 1040.575188][T12935] usb 6-1: too many configurations: 68, using maximum allowed: 8
[ 1040.635162][ T9670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1040.652943][ T9670] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1040.675704][ T9670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.698848][ T9670] usb 5-1: config 0 descriptor??
[ 1040.774482][T12935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1040.807665][T12935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
22:30:30 executing program 3:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=')', 0x0}, 0x48)

[ 1040.833972][T12935] usb 6-1: config 0 interface 0 has no altsetting 0
22:30:30 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1040.924676][T12935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1040.948014][T12935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1040.978931][T12935] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1040.978948][ T9670] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:30:31 executing program 3:
socketpair(0x37, 0x0, 0x0, &(0x7f0000000400))

[ 1041.064486][T12935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1041.106764][T12935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
22:30:31 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001b80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0)

[ 1041.167793][T12935] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1041.304426][T12935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1041.346669][T12935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1041.379782][T12935] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1041.429144][ T9670] usb 5-1: USB disconnect, device number 40
[ 1041.458576][ T9670] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1041.474336][T12935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1041.491057][T12935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1041.507362][T12935] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1041.634399][T12935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1041.643972][T12935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1041.664818][T12935] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1041.764680][T12935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1041.774986][T12935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1041.786714][T12935] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1041.884465][T12935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1041.897303][T12935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1041.919787][T12935] usb 6-1: config 0 interface 0 has no altsetting 0
22:30:31 executing program 1:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0}, 0x20)

[ 1042.104284][T12935] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1042.113667][T12935] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1042.122246][T12935] usb 6-1: Product: syz
[ 1042.126611][T12935] usb 6-1: Manufacturer: syz
[ 1042.131352][T12935] usb 6-1: SerialNumber: syz
[ 1042.140014][T12935] usb 6-1: config 0 descriptor??
[ 1042.200502][T12935] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[ 1042.511417][T11807] usb 6-1: USB disconnect, device number 34
[ 1042.517506][    C1] usb 6-1: yurex_control_callback - control failed: -71
[ 1042.536421][T11807] yurex 6-1:0.0: USB YUREX #0 now disconnected
22:30:33 executing program 5:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

22:30:33 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:33 executing program 3:
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
syz_clone(0x24001400, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)='I')

22:30:33 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:33 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:30:33 executing program 1:
lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

22:30:33 executing program 1:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

22:30:33 executing program 5:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

22:30:33 executing program 1:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

22:30:33 executing program 3:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)

22:30:33 executing program 5:
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
fcntl$setown(r0, 0x6, r1)

[ 1043.575216][T11807] usb 5-1: new high-speed USB device number 41 using dummy_hcd
22:30:33 executing program 5:
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x38)

22:30:33 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000})
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x201)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = userfaultfd(0x800)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "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"})
read$proc_mixer(r0, &(0x7f00000010c0)=""/84, 0x54)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001140)='/proc/asound/card3/oss_mixer\x00', 0x6e0000, 0x0)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000001180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x8000000)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000013c0))
pipe2$9p(&(0x7f0000001400), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001500), 0x80800, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)

[ 1043.824338][T11807] usb 5-1: Using ep0 maxpacket: 8
[ 1043.944949][T11807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1043.963202][T11807] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1043.989719][T11807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1044.025012][T11807] usb 5-1: config 0 descriptor??
[ 1044.298068][T11807] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:30:34 executing program 3:
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

22:30:34 executing program 1:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

22:30:34 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20)

[ 1044.769931][T12935] usb 5-1: USB disconnect, device number 41
[ 1044.798205][T12935] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:30:35 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:35 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

22:30:35 executing program 1:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

22:30:35 executing program 5:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x17, &(0x7f0000000c40)="abed050a", 0x4)

22:30:35 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:30:35 executing program 3:
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0xe, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x38)

22:30:35 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@kfunc], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:30:35 executing program 5:
syz_open_dev$vcsa(&(0x7f0000000740), 0x1, 0x0)

22:30:35 executing program 3:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0x3, r0, 0x0, 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r1)

22:30:35 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
syz_open_dev$loop(0x0, 0x9, 0x0)
userfaultfd(0x0)
ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000001180))
write$P9_RSETATTR(r0, &(0x7f0000001280)={0x7}, 0x7)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000001380)={0x80000000, &(0x7f00000012c0), &(0x7f0000001300)})
pipe2$9p(&(0x7f0000001400), 0x0)
write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

22:30:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x14, r1, 0x113}, 0x14}}, 0x0)

22:30:35 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1045.724345][T12930] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1045.984325][T12930] usb 5-1: Using ep0 maxpacket: 8
[ 1046.104339][T12930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1046.116119][T12930] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1046.125385][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.145121][T12930] usb 5-1: config 0 descriptor??
22:30:36 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:36 executing program 3:
openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

22:30:36 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}}}})

22:30:36 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x180}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@mcast1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

[ 1046.401566][T12930] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1046.874319][T12930] usb 5-1: USB disconnect, device number 42
[ 1046.895950][T12930] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:30:37 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:30:37 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000)

22:30:37 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:37 executing program 3:
syz_clone3(&(0x7f00000020c0)={0x8080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

22:30:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001d00)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000002200), 0xffffffffffffffff)

22:30:37 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:37 executing program 5:
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x38)

22:30:37 executing program 1:
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0000, 0x0)
r2 = syz_clone3(&(0x7f0000000500)={0x300, &(0x7f00000002c0)=<r3=>0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff], 0x1}, 0x58)
r4 = syz_clone3(&(0x7f00000020c0)={0x8080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002080)=[r2, r2, 0x0], 0x3, {r1}}, 0x58)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000005a40)={&(0x7f0000000580), 0xc, &(0x7f00000047c0)=[{&(0x7f00000005c0)={0x1c8, 0x3b, 0x200, 0x70bd26, 0x25dfdbfc, "", [@generic="4d4b1bfa5477d77f543af453b8a9d90294e23cae6610769e887cb73f14d25311b5f10c54fc1ea0f4adfbbd709bb1bbeadc4b2cbae3d5609b3f552e815fa1c63fe28da449bf8727d2df6512c674da6eb9c979b8c05480f07798f7e03453c30e83da77ff304d86bded85215c2a01e9122d72f13edb12bc5ad22a7ca0a55fe6ea5783f46c943fdf7fde836997", @nested={0x12b, 0x79, 0x0, 0x1, [@generic="5ac55ff7fb181d292c80ab8aaee692cd1f6d510e69127e625b99633cca89a326f7b96dcfc7dff5accfa054ca78ab3328fa6cc75dd12754ffe890b29ddb565c125f93053dab17e3d831fc9ce178a070b70cab411797b9c086e40bca51560a9f475f16bad640a92fe0291df4e1cb4725bd", @generic, @generic="7663aa060716b006a8e2f5607385ee1014e8d4bf7c2295afb412f8325b47298bd8b0bb6986d4e50001853cfbee8f86dce0fdb2786f1cc7b6976dc74ac2b059645a8714e8ef8eabeea78359fa0c0753aed8497a75c40957310912f1314f734b77803d6fcf9760131be8f4d4b209e3a95048baf1b96972a360ebdb8255b4ee78f2bb144229355867777cd54a120f574caf31b990648d794a73042d55d9e213efdcd59bc0d8426c02", @typed={0x8, 0x5c, 0x0, 0x0, @pid}, @typed={0x8, 0x4d, 0x0, 0x0, @fd=r3}]}]}, 0x1c8}, {&(0x7f0000000880)={0x1440, 0x37, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x1f, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="5ab997e66cc8810cb00995cf7decbd466a9eef445f162bffec74ef1198073487c64067c9a0384e0d04b3dc178b3690a125513641028305d954d11f0bc823e26ffd2a5ed1f93d54d96bc6cf9bd1ee0b40433785e36f2a8507d25367eb703cc0f9053f", @nested={0x20b, 0x7a, 0x0, 0x1, [@generic="9be35cf26788ee3d1fdd7980fb9379461233e2dc7b5b12c00ac3fecee11ab0e4c2b3be9362d704bfe7b1cbc11f90c41ebe8d0e6556afbe7627edb2be768e8402a712643f554abd1b02e2f6cdef7d2c9b8d89807e670d87fa56ef3218046ac329da8bd2e61e8ee3bb1a091f344bd322e6e294c631888e836409b31afd8d11b12313fed2e6e33f6ea994401b3c9b8207d7c8f018ed832e06efa1cf901b079b17c6277a0114e287c29d9e92e84394becf8fad34d8", @generic="e53e7b3dffd82721782a8a51f38bd256e84d69c140854cbd679dbf533c69e12b99b65eb88ebceebf563cc17f423b6758a57b0386829fad76173a12bfa0b8f745aa78a66eda135e96331bfa03eea00ed21148de7cbb749d080ccdec6fe398d76188975eb6f0cb2ada592d1bd7b12d65f5695b0cb9bf9b842287239e9a15b78bf238da6ce00348c51c85350ae4b068bf15c2d61e6b4fda1cfe4c1b1792942f2dd00adfb7918dc8c0989d74580cefd34dd2", @generic="d74ea12ccf92cd399734f0f995c2e839527c3950af1777fc5689a42bda9416d5c19c3fb17af95a5aef48e916c414c301ce5fbe16bf780b22d3a4a0a8c9d96f912825966e4cfb8443e9daf79bd8f5fe72570f02397bae085d4281c9f75698a2d2a79f55f5f4dd0302e60cdb9fa7b27fb6639a2ae407b96064f6e2bb7a4b84cd778ee6dc8278a3182562c0994b27ebb3a44c57458b134d1123f4c60802", @typed={0x8, 0x71, 0x0, 0x0, @pid}]}, @typed={0x8, 0x87, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}, @typed={0x8d, 0x91, 0x0, 0x0, @binary="587fac51985eebc16bfb4035e029831292edca68f5b2d8fbe52917e82b5c50483f34d12284554ff3db8c8fd7b77e17c7d93095de09de83fb1b0dad1a3f84c6193d4de078e8d304031fe3480fd5f045a1ab86aa94b15709aa5ce4d7fda2da49aa6c1ee1688357838bdbf43199f55fe7cb29939b8b8c48706bc7e6b4a96ebe667c70f5f2e689a9a97a31"}, @nested={0x1091, 0x8c, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xf, 0x0, 0x0, 0x0, @str='/dev/hwrng\x00'}, @generic="b09a9dc6c5f0b318e48f7babaea1050d6b09b950f54e38a0fa73d391e1569d85ce18f116f2e3f4e40d3a507f4fe16800e8570202ccf7fdb2a3067f25f12f", @generic="51249bd8dc447da64608489cd17ad1b4c89bd2049466c3475a9d6356c66551b2265ad2", @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@private0}, @generic="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", @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @generic="0ed9f33e16d072d17dd89772133e2b0b43710183df4ee7d0b2d506a1", @generic="49b4057ba29233cf2e2b1c39bb51e682b5dcc1e61799aa254d4dc5401da6fb88454ef6cc8f5e8385b9b20e92fd7d5ee270a7bd7290282645c1aedbf8c55ae9b33dbe2a8a7e8dd582f528f9cf7ec0f4a17da997c02f43741cbb508d344cb0029fac1c85ec8a8b1a"]}, 0x1440}, {&(0x7f0000001d40)={0x84, 0x20, 0x200, 0x70bd28, 0x25dfdbfb, "", [@generic="a1ab6198ea08968fab713a8902d69316981469a7d885c0c1bf26b841c30de2a5f381f63fbc7880b0383ce40b2b6998c77ea45d4cdc05cabeff3a6782a6109d5ab4ebd84631ee874a48522fc87764445be1f91ba06462c5cea0677a1df8", @generic="4074e07cb058c1632b84a206eb344da27839a90938"]}, 0x84}, {&(0x7f0000001e00)={0x10, 0x22, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@generic]}, 0x10}, {&(0x7f0000001e40)={0x10, 0x10, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}, {&(0x7f0000002140)={0x10c8, 0x1e, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xc, 0x30, 0x0, 0x0, @u64=0x3}, @nested={0x28, 0x5c, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @generic, @typed={0x14, 0x5f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r4}, @generic]}, @generic="4eed568236ecb3d54bdb20bb53c80d9b6cd44611ec8dde1e3f523aaea771e1f2a79d1d2c495e7361925a220af6c8594acf76dc5fa8dba44112743b72d31a38b9ffe46a5a5df8191f328f37471c3007fe8c4e63fec414367c6316d79837f438100305fa3c09", @generic="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", @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x1000}, @typed={0x8, 0x51, 0x0, 0x0, @fd=r3}, @generic="e4c4c2ced6737937635bfe8340c3"]}, 0x10c8}, {0x0}, {&(0x7f0000004400)={0xf4, 0x1b, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@generic="708520d289098b16193e4f4e9ae94d1aa894d924cd37d55b26bd312b66677acc6a32ac8b4fd1cfb508a69fc9a6105ed1e703e66817bb896c9fec2782d7d9c693ff6cad58cd127d1afe2af91774cc1e2a079aedc7bca581d907d4cac502f7dc237503f6670928424e7b9e8c02220e355b7b01909953c333856654e9721fc69993ade9c12ab919504428c9c0fef3da82e01f69436761543d077865a261352a70611073dcecaff7dc607e35cb2e5df1543b33ab79616a56b7ed9872e4aa1487acdd95ea8069439b7fb857d8602e18af940c8c88d7c20a9a3ddf3dd07bc624d7849321"]}, 0xf4}, {&(0x7f0000004500)={0x1ec, 0x1c, 0x10, 0x70bd2c, 0x0, "", [@generic="be6da1cf55f5af61502658c657347bf1", @nested={0x18e, 0x71, 0x0, 0x1, [@generic="5cb21fc0d46630cc7db9d3b2bbd28c3a1fd88f2d69f0bee5edcc6ec69ef5e248db9ec7a50fa54ba62e217c", @typed={0x8, 0x95, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="1996378dc0", @typed={0x8, 0x5a, 0x0, 0x0, @uid=0xee01}, @generic="9161ea177b6bc697d7d2f87f94087096f96cbd481a1e3aedf836fbced789dfe2119ff5fcba6a53151be6e22ca88833b1711d2e488f74bc86d601da67ccf17971e2c4157bcaa84be9751de39f76782a4413715da6be8c0380df84a712fed2b8f2bc85832bf11e66ec2f3d60665fc4dfaaa28731cbadf3366ca1dd9d5f17c80c8c72c26846e0a92b72ea2cb99fd1f2", @generic="bf0c3501b3e069fbd1042c21411115587121eb9ff2cfc993f8f978afdcf56d6bdc4b703089ed9ea845cedbccbcb67554aa2fb2b9b4e371bc2d68ccefb2cbf2d9391c25efcecc11732208f92977a0a8afcd183b59e263cc6f174abcafc67b1d1ff387da75bdf5beec3f1613b0b4e29dd6b6c60082756f20ceddbe38a1ae5776fa78a5a0e80bb2be59a9d2462807dc44513acfc6341c64e610aac7ed029079cfd85c9b7e937128e0e0e8d908cbfe37a8d926578bdef05a13d924e99c28"]}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @generic="3524e6d869f997cb8e90728ad7c1d452878f3629a70d716c37cf3a8eb452fcb806", @nested={0x4, 0x25, 0x0, 0x1, [@generic]}, @typed={0xc, 0x1b, 0x0, 0x0, @u64=0x6c}, @generic]}, 0x1ec}], 0x9, &(0x7f0000005a00)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x200008c1}, 0x40)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, 0x0)

22:30:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x18, r1, 0x113, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)

22:30:37 executing program 5:
syz_open_dev$vcsa(&(0x7f0000000740), 0x0, 0x0)

22:30:37 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:37 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18424700fbffffff"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1a, &(0x7f0000000080)=""/26, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 1047.764299][T12935] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1048.014354][T12935] usb 5-1: Using ep0 maxpacket: 8
[ 1048.137902][T12935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1048.156040][T12935] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1048.165626][T12935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.182912][T12935] usb 5-1: config 0 descriptor??
[ 1048.439117][T12935] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1048.896941][ T5274] usb 5-1: USB disconnect, device number 43
[ 1048.931361][ T5274] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:30:39 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

22:30:39 executing program 1:
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001140)='/proc/asound/card3/oss_mixer\x00', 0x6e0000, 0x0)

22:30:39 executing program 3:
syz_emit_ethernet(0x4c, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x16, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}]}}}}}}, 0x0)

22:30:39 executing program 5:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040))

22:30:39 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:39 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:39 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)

22:30:39 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xfffffffffffff800})
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x201)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = userfaultfd(0x800)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
read$proc_mixer(0xffffffffffffffff, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001140)='/proc/asound/card3/oss_mixer\x00', 0x6e0000, 0x0)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000001180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x8000000)
write$P9_RSETATTR(r0, &(0x7f0000001280)={0x7}, 0x7)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000001380)={0x80000000, &(0x7f00000012c0), 0x0})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000013c0))
pipe2$9p(&(0x7f0000001400)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000001440)={0x7, 0x1b, 0x2}, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000001480)='snd_soc_dapm_walk_done\x00'}, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001500), 0x80800, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

22:30:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r1, 0x113, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev}]}]}, 0x44}}, 0x0)

22:30:39 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:39 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/keys\x00', 0x0, 0x0)

22:30:39 executing program 3:
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x38)

[ 1049.844252][ T5274] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1050.094607][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1050.225268][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1050.236690][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1050.246371][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.258532][ T5274] usb 5-1: config 0 descriptor??
[ 1050.548316][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1050.755621][T11807] usb 5-1: USB disconnect, device number 44
[ 1050.780093][T11807] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:30:41 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

22:30:41 executing program 1:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4)

22:30:41 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)

22:30:41 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x8, 0x18, &(0x7f0000000080)=""/24, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:30:41 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:41 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:41 executing program 1:
socketpair(0x3, 0x0, 0xffff, &(0x7f0000000180))

22:30:41 executing program 3:
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0xf, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x38)

22:30:41 executing program 5:
mount_setattr(0xffffffffffffff9c, 0x0, 0x900, &(0x7f0000000100)={0x0, 0x0, 0x180000}, 0x20)

22:30:41 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00')
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100))

22:30:41 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00')

22:30:41 executing program 5:
mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

[ 1051.765680][ T5274] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1052.004318][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1052.124439][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1052.136063][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1052.145425][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.164249][ T5274] usb 5-1: config 0 descriptor??
[ 1052.428197][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1052.630098][ T5274] usb 5-1: USB disconnect, device number 45
[ 1052.661113][ T5274] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:30:43 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

22:30:43 executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2505, 0x220, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x15, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0})
keyctl$search(0x5, 0x0, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)

22:30:43 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000100)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xd8, &(0x7f0000000180)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:30:43 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:43 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'netdevsim0\x00', 0x200})

22:30:43 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:43 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000006440)='/sys/bus/media', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

22:30:43 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)

22:30:43 executing program 5:
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2505, 0x220, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x8, 0x6}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x8e, 0x0, 0x40}, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1, [{0x0, 0x0}]})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)

22:30:43 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff)

22:30:43 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1053.464394][ T5274] usb 2-1: new high-speed USB device number 82 using dummy_hcd
22:30:43 executing program 3:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0)
read$ptp(r0, &(0x7f0000001780)=""/4103, 0xdf4a1da3df7e334b)

[ 1053.564225][ T9670] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1053.734466][ T5274] usb 2-1: Using ep0 maxpacket: 16
[ 1053.784663][T15189] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[ 1053.845381][ T9670] usb 5-1: Using ep0 maxpacket: 8
[ 1053.874594][ T5274] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1053.885903][ T5274] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1053.984470][ T9670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1053.995803][ T9670] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1054.006119][ T9670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1054.020711][ T9670] usb 5-1: config 0 descriptor??
[ 1054.074377][ T5274] usb 2-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.40
[ 1054.083595][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.092385][ T5274] usb 2-1: Product: syz
[ 1054.096801][ T5274] usb 2-1: Manufacturer: syz
[ 1054.101974][ T5274] usb 2-1: SerialNumber: syz
[ 1054.181156][T15189] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1054.289145][ T9670] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1054.395087][ T5274] usbhid 2-1:1.0: can't add hid device: -22
[ 1054.401178][ T5274] usbhid: probe of 2-1:1.0 failed with error -22
[ 1054.411964][ T5274] usb 2-1: USB disconnect, device number 82
[ 1054.455027][T15189] usb 6-1: string descriptor 0 read error: -22
[ 1054.468260][T15189] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.40
[ 1054.477854][T15189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.493809][ T9670] usb 5-1: USB disconnect, device number 46
[ 1054.526868][ T9670] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1054.537305][T15189] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[ 1054.740285][ T5274] usb 6-1: USB disconnect, device number 35
22:30:45 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:30:45 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xd}]}]}}, 0x0, 0x2e}, 0x20)

22:30:45 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(0xffffffffffffffff)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:45 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

22:30:45 executing program 3:
syz_clone(0x18102000, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1055.404243][ T5274] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1055.644161][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1055.764359][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1055.777526][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1055.786716][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.797793][ T5274] usb 5-1: config 0 descriptor??
[ 1056.057324][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:30:46 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:46 executing program 1:
bpf$BPF_PROG_TEST_RUN(0xb, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0}, 0x48)

22:30:46 executing program 3:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000180))

22:30:46 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181040, 0x0)

22:30:46 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(0xffffffffffffffff)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:46 executing program 5:
syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)

22:30:46 executing program 1:
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)
recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)

22:30:48 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:30:48 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:30:48 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x12, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:30:48 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x20, 0x4, 0x4, 0x80}, 0x48)

22:30:48 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(0xffffffffffffffff)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1058.117917][T12935] usb 5-1: USB disconnect, device number 47
[ 1058.189786][T12935] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1058.664203][T12935] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1058.914399][T12935] usb 5-1: Using ep0 maxpacket: 8
[ 1059.044343][T12935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1059.058283][T12935] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1059.068976][T12935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.082508][T12935] usb 5-1: config 0 descriptor??
[ 1059.347301][T12935] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:30:49 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:49 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x2, &(0x7f0000000fc0)=@raw=[@cb_func], &(0x7f0000001000)='GPL\x00', 0x0, 0x1000, &(0x7f0000001040)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:30:49 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)='L', 0x1}], 0x1, &(0x7f0000000440)=[@prinfo={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @loopback}, @authinfo={0x10}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}, @dstaddrv4={0x10, 0x84, 0x9, @local={0xac, 0x14, 0x0}}, @sndinfo={0x1c}, @prinfo={0x14}], 0x9c}, 0x0)

22:30:49 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x10}, 0x10)
listen(r0, 0x7fffffff)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000080)={0xff67}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000001c0)="e6", 0x1, 0x0, 0x0, 0x0)

22:30:49 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:49 executing program 5:
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r1, r0)
sendto(r2, &(0x7f0000000340)='q', 0x1, 0x0, &(0x7f0000000440)=@in6={0x1c}, 0x1c)

22:30:49 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080), 0x10)

[ 1059.576034][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.583028][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
22:30:51 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:30:51 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:51 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000080)={0x1, [0x3]}, 0x6)

22:30:51 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4)
connect(r0, &(0x7f0000000200)=@in={0x10, 0x2}, 0x10)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c)

22:30:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000003900e7ffffffffffffff0000030000000c00008004000a"], 0x20}}, 0x0)

[ 1061.269645][ T9670] usb 5-1: USB disconnect, device number 48
[ 1061.365612][ T9670] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1061.834231][ T9670] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1062.086236][ T9670] usb 5-1: Using ep0 maxpacket: 8
[ 1062.224484][ T9670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1062.235809][ T9670] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1062.246965][ T9670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.258013][ T9670] usb 5-1: config 0 descriptor??
[ 1062.506276][ T9670] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:30:52 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:30:52 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee00}}]}, 0x28}}, 0x0)

22:30:52 executing program 5:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b04, 0x0)

22:30:52 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:52 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:30:52 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x1300, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0x2700}, 0x0)

[ 1062.954469][T12930] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1063.204228][T12930] usb 6-1: Using ep0 maxpacket: 8
[ 1063.331869][T12930] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1063.348896][T12930] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1063.359697][T12930] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1063.373769][T12930] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1063.387708][T12930] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1063.397306][T12930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.664209][T12930] usb 6-1: usb_control_msg returned -32
[ 1063.669929][T12930] usbtmc 6-1:16.0: can't read capabilities
[ 1064.250422][ T9670] usb 5-1: USB disconnect, device number 49
[ 1064.256615][    C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1064.269138][ T9670] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:30:54 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:30:54 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, 0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:54 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x1300, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0x2700}, 0x0)

22:30:54 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:30:54 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:54 executing program 3:
r0 = socket(0x22, 0x2, 0x2)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

22:30:55 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_COOKIE(r0, 0x1, 0xe, &(0x7f00000045c0), &(0x7f0000005f00)=0x8)

22:30:55 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, 0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1065.134415][T12935] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1065.384393][T12935] usb 5-1: Using ep0 maxpacket: 8
[ 1065.504354][T12935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1065.524263][T12935] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1065.533361][T12935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.558425][T12935] usb 5-1: config 0 descriptor??
22:30:55 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_COOKIE(r0, 0x1, 0x38, &(0x7f00000045c0), &(0x7f0000005f00)=0x8)

22:30:55 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:30:55 executing program 3:
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)

22:30:55 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, 0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1065.672226][ T9670] usb 6-1: USB disconnect, device number 36
[ 1065.705794][T18900] mmap: syz-executor.3 (18900) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
22:30:57 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:30:57 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x0, [{@empty}]}]}}}], 0x20}, 0x0)

22:30:57 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_COOKIE(r0, 0x1, 0x4a, &(0x7f00000045c0), &(0x7f0000005f00)=0x8)

22:30:57 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:30:57 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:30:57 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

[ 1067.927517][T12935] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1067.957711][T12935] usb 5-1: USB disconnect, device number 50
22:30:58 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1067.994641][T12935] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:30:58 executing program 3:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/block/loop0', 0x0, 0x0)
unlinkat(r0, &(0x7f0000004040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)

22:30:58 executing program 5:
mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)

22:30:58 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
dup2(r0, r1)

22:30:58 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="bbe518ebbae49b138ca7d6902f3b", 0xe}], 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0})

[ 1068.424217][T12935] usb 5-1: new high-speed USB device number 51 using dummy_hcd
22:30:58 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000008380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
r6 = dup3(r4, r1, 0x0)
io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
dup3(r1, r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
ppoll(&(0x7f0000000d40)=[{r0, 0x2000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x457}, {r6, 0x20}, {0xffffffffffffffff, 0x1040}], 0x5, &(0x7f0000000d80)={0x0, 0x989680}, &(0x7f0000000dc0)={[0x80]}, 0x8)

[ 1068.694404][T12935] usb 5-1: Using ep0 maxpacket: 8
[ 1068.817551][T12935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1068.828917][T12935] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1068.838651][T12935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.854787][T12935] usb 5-1: config 0 descriptor??
22:31:01 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:01 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:31:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000640)={"06000000dd245c8487040000c9c8dc1964325fa96fa42b76030001c02bec0ba41f0725003a40c8a4880400003b00041f09ffff80003c5ca2c2000000ee3778baece6b88378e3d63a0e000040361d264ffa8b46485f02baee010100c04252066178868d1ef4b5ffff5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df1e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af706f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019be5fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b863c8e1af3cc50815b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})

22:31:01 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:01 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:31:01 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000008380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
r6 = dup3(r4, r1, 0x0)
io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
dup3(r1, r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
ppoll(&(0x7f0000000d40)=[{r0, 0x2000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x457}, {r6, 0x20}, {0xffffffffffffffff, 0x1040}], 0x5, &(0x7f0000000d80)={0x0, 0x989680}, &(0x7f0000000dc0)={[0x80]}, 0x8)

[ 1071.046323][T12935] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:31:01 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000008380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
r6 = dup3(r4, r1, 0x0)
io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
dup3(r1, r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
ppoll(&(0x7f0000000d40)=[{r0, 0x2000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x457}, {r6, 0x20}, {0xffffffffffffffff, 0x1040}], 0x5, &(0x7f0000000d80)={0x0, 0x989680}, &(0x7f0000000dc0)={[0x80]}, 0x8)

[ 1071.111196][T12935] usb 5-1: USB disconnect, device number 51
22:31:01 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000480)=""/44}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
fcntl$dupfd(r4, 0x406, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x944e}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000001300)='GPL\x00', 0x9, 0xc9, &(0x7f0000001340)=""/201, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0x5, 0x401, 0x3ff}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000170000850000009f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

[ 1071.231848][T12935] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:31:01 executing program 5:
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000170000850000009f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

22:31:01 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380), 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
fcntl$dupfd(r2, 0x406, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x944e}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000001300)='GPL\x00', 0x9, 0xc9, &(0x7f0000001340)=""/201, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0x5, 0x401, 0x3ff}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000170000850000009f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

[ 1071.654390][T12935] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1071.904112][T12935] usb 5-1: Using ep0 maxpacket: 8
22:31:02 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1072.024469][T12935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1072.044533][T12935] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1072.077157][T12935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.098671][T12935] usb 5-1: config 0 descriptor??
22:31:02 executing program 5:
syz_clone(0x160000, 0x0, 0x0, 0x0, 0x0, 0x0)

22:31:04 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:04 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, 0x0, 0x0, 0x0)

22:31:04 executing program 5:
setresuid(0xee01, 0xee01, 0xffffffffffffffff)
socket$inet(0x2, 0x3, 0x0)

22:31:04 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0x0, 0x0)

22:31:04 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000480)=""/44}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
fcntl$dupfd(r4, 0x406, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x944e}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000001300)='GPL\x00', 0x9, 0xc9, &(0x7f0000001340)=""/201, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0x5, 0x401, 0x3ff}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000170000850000009f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

22:31:04 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[ 1074.200389][T12935] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:31:04 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000480)=""/44}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
fcntl$dupfd(r4, 0x406, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x944e}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000001300)='GPL\x00', 0x9, 0xc9, &(0x7f0000001340)=""/201, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0x5, 0x401, 0x3ff}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000170000850000009f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

[ 1074.248417][T12935] usb 5-1: USB disconnect, device number 52
[ 1074.351198][T12935] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:31:04 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:04 executing program 5:
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
socketpair(0x1, 0x2, 0x0, 0x0)

22:31:05 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0x0, 0x0)

22:31:05 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x6)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e)

22:31:05 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4)
fcntl$dupfd(r2, 0x406, r2)
sendto$inet(r2, &(0x7f0000001e00)="e4da5ec4c254443124148e0489625adc6780805476fe8a65a4a35208f4037008ef2a268ccec9053587458ada35a489234f8a3ecb80d56d2c5569e657028e4969f5c24fc7f3d03a692df9be4aad532e652a585c367e5e52d8cf7e9daa4a65531e6c93dea4e453d1d6e2f15923f39d88665f4f7db7ef93a230e1240fc0debc47b767e78c905865c66a9ce7551f15c1d50ffc6310dea15a8b0bcf5a8de45519d9d5c00f741cd0483b3907158a6bc0c90431b60f0161a8cc602f7478e0df054a694469b18dd96f36f0b6e6c85cfa3fdca5978d9c0104493418377bbee4959d0c2a88073cb44784779ef5", 0xe8, 0x404c004, &(0x7f00000003c0)={0x2, 0x4e31, @private=0xa010100}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
dup3(r3, r4, 0x0)
getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000001680), &(0x7f0000000040)=0x10)
syncfs(r4)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000740)=0x201, 0x4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000900)=0xc)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r5 = dup3(r2, r0, 0x0)
getsockname$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0xffffffffffffff91)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"})

22:31:05 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:06 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:06 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0x0, 0x0)

22:31:06 executing program 5:
setresuid(0xee01, 0xee01, 0xffffffffffffffff)
setresgid(0x0, 0x0, 0xee00)

22:31:06 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000480)=""/44}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
fcntl$dupfd(r4, 0x406, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x944e}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000001300)='GPL\x00', 0x9, 0xc9, &(0x7f0000001340)=""/201, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0x5, 0x401, 0x3ff}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000170000850000009f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

22:31:07 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:07 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000580)=@raw=[@map_val], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:31:07 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:07 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000480)=""/44}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
fcntl$dupfd(r4, 0x406, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x944e}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000001300)='GPL\x00', 0x9, 0xc9, &(0x7f0000001340)=""/201, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0x5, 0x401, 0x3ff}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000170000850000009f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

22:31:07 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0x0, &(0x7f00000000c0))

22:31:07 executing program 5:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
mremap(&(0x7f000084a000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000042a000/0x3000)=nil)
syz_clone(0x0, 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0)
madvise(&(0x7f000019e000/0x4000)=nil, 0x200000, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8000, 0x0)

22:31:07 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:08 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0x0, &(0x7f00000000c0))

22:31:08 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

[ 1078.994277][ T9670] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1079.204245][ T9670] usb 5-1: device descriptor read/64, error 18
22:31:09 executing program 5:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
mremap(&(0x7f000084a000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000042a000/0x3000)=nil)
syz_clone(0x0, 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0)
madvise(&(0x7f000019e000/0x4000)=nil, 0x200000, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8000, 0x0)

22:31:09 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0x0, &(0x7f00000000c0))

[ 1079.484254][ T9670] usb 5-1: new high-speed USB device number 54 using dummy_hcd
22:31:09 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000480)=""/44}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
fcntl$dupfd(r4, 0x406, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x944e}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000001300)='GPL\x00', 0x9, 0xc9, &(0x7f0000001340)=""/201, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0x5, 0x401, 0x3ff}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000170000850000009f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

[ 1079.684232][ T9670] usb 5-1: device descriptor read/64, error 18
[ 1079.804391][ T9670] usb usb5-port1: attempt power cycle
[ 1080.214158][ T9670] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1080.394397][ T9670] usb 5-1: device descriptor read/8, error -61
[ 1080.664311][ T9670] usb 5-1: new high-speed USB device number 56 using dummy_hcd
22:31:10 executing program 0:
timer_create(0x0, 0x0, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:10 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000480)=""/44}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
fcntl$dupfd(r4, 0x406, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x944e}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000001300)='GPL\x00', 0x9, 0xc9, &(0x7f0000001340)=""/201, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0x5, 0x401, 0x3ff}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000170000850000009f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

22:31:10 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0])

[ 1080.834563][ T9670] usb 5-1: device descriptor read/8, error -61
[ 1080.954427][ T9670] usb usb5-port1: unable to enumerate USB device
22:31:11 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:11 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0])

[ 1082.184317][ T9670] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1082.384430][ T9670] usb 5-1: device descriptor read/64, error 18
[ 1082.654244][ T9670] usb 5-1: new high-speed USB device number 58 using dummy_hcd
22:31:12 executing program 3:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
mremap(&(0x7f000084a000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000042a000/0x3000)=nil)
syz_clone(0x0, 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0)
madvise(&(0x7f000019e000/0x4000)=nil, 0x200000, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8000, 0x0)

22:31:12 executing program 0:
timer_create(0x0, 0x0, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[ 1082.884232][ T9670] usb 5-1: device descriptor read/64, error 18
22:31:12 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0])

[ 1083.004730][ T9670] usb usb5-port1: attempt power cycle
22:31:13 executing program 5:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
mremap(&(0x7f000084a000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000042a000/0x3000)=nil)
syz_clone(0x0, 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0)
madvise(&(0x7f000019e000/0x4000)=nil, 0x200000, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8000, 0x0)

[ 1083.414349][ T9670] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1083.594298][ T9670] usb 5-1: device descriptor read/8, error -61
[ 1083.864164][ T9670] usb 5-1: new high-speed USB device number 60 using dummy_hcd
22:31:14 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1084.054484][ T9670] usb 5-1: device descriptor read/8, error -61
22:31:14 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
mremap(&(0x7f000084a000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000042a000/0x3000)=nil)
syz_clone(0x0, 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0)
madvise(&(0x7f000019e000/0x4000)=nil, 0x200000, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8000, 0x0)

[ 1084.174428][ T9670] usb usb5-port1: unable to enumerate USB device
22:31:14 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:14 executing program 0:
timer_create(0x0, 0x0, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:15 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1085.304266][T12935] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1085.524288][T12935] usb 5-1: device descriptor read/64, error 18
22:31:15 executing program 3:
syz_emit_ethernet(0x19, &(0x7f0000000000)={@link_local, @remote, @val, {@llc={0x4, {@llc={0x0, 0x0, '3'}}}}}, 0x0)

[ 1085.804497][T12935] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1085.994300][T12935] usb 5-1: device descriptor read/64, error 18
22:31:16 executing program 3:
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/210)

22:31:16 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1086.124575][T12935] usb usb5-port1: attempt power cycle
22:31:16 executing program 0:
timer_create(0x0, &(0x7f0000000100), &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:16 executing program 3:
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/210)

[ 1086.564435][T12935] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1086.784567][T12935] usb 5-1: device descriptor read/8, error -61
22:31:16 executing program 3:
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)

[ 1087.066827][T12935] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1087.304522][T12935] usb 5-1: device descriptor read/8, error -61
[ 1087.424431][T12935] usb usb5-port1: unable to enumerate USB device
22:31:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffd, 0x0, 0xb6e, 0x0, 0x9, 0x9, 0x1003], 0x10000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:31:17 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48)

22:31:17 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}])

22:31:18 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5aa8fe1b7f94d02754cb293fed00ecb522cb80145791fdb03b8ccbb3eb7b"], 0x208e24b)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:31:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1088.414259][T15189] usb 5-1: new high-speed USB device number 65 using dummy_hcd
22:31:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1})

[ 1088.604376][T15189] usb 5-1: device descriptor read/64, error 18
22:31:18 executing program 1:
bpf$BPF_GET_MAP_INFO(0x6, 0x0, 0x0)

22:31:18 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}])

[ 1088.874462][T15189] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1089.064286][T15189] usb 5-1: device descriptor read/64, error 18
[ 1089.195377][T15189] usb usb5-port1: attempt power cycle
[ 1089.614154][T15189] usb 5-1: new high-speed USB device number 67 using dummy_hcd
22:31:19 executing program 0:
timer_create(0x0, &(0x7f0000000100), &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:19 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

22:31:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1})

22:31:19 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x11, &(0x7f0000000040)="970100000000000000002ffe710ab3363e")

[ 1089.804361][T15189] usb 5-1: device descriptor read/8, error -61
22:31:19 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}])

22:31:20 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

[ 1090.074286][T15189] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1090.194612][ T5274] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1090.244377][T15189] usb 5-1: device descriptor read/8, error -61
[ 1090.368781][T15189] usb usb5-port1: unable to enumerate USB device
[ 1090.584341][ T5274] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1090.623704][ T5274] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1090.721757][ T5274] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1090.782637][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.850999][ T5274] usb 2-1: config 0 descriptor??
22:31:21 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1})

22:31:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x0, 0x0, 0x1000, &(0x7f0000fd9000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x7b, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:31:21 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000), 0x0, 0x1000000, 0x0, 0x10}])

22:31:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1})

[ 1091.534635][ T5274] usb 5-1: new high-speed USB device number 69 using dummy_hcd
22:31:21 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)

[ 1091.734605][ T5274] usb 5-1: device descriptor read/64, error 18
[ 1092.004255][ T5274] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1092.204319][ T5274] usb 5-1: device descriptor read/64, error 18
[ 1092.324503][ T5274] usb usb5-port1: attempt power cycle
[ 1092.734263][ T5274] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1092.904552][ T5274] usb 5-1: device descriptor read/8, error -61
[ 1092.911426][T15190] usb 2-1: USB disconnect, device number 83
22:31:23 executing program 0:
timer_create(0x0, &(0x7f0000000100), &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:23 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000f9ffffff000000000000000085000000410000009500000000000000e33c40ab4dd134de7d8820322329ace01a1c5ea4e85d74872a159a651fa0d24ea28f00d6fa7bb8c6f4cf6fb35163c377de27099281bc41229eba4196d04b5a2c562195c4d84ad533d431ca14c0543d4f437d69ba921ca85bdcb13ce9f08634a2cfb0383b880c729ece02ffac11bf913f5e3cc6318229780acb2688602c1c45835aa0810a2317c926eac718d03072fcb03c085df36a9da95e54e45a13b60ca34785e0022a150eaf84db0467cc89b483187af16cdf93cfb137a61e6e255a19be7c15ba470f62dd01"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

22:31:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS(r2, 0x4140aecd, &(0x7f00000003c0)=ANY=[])

22:31:23 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000), 0x0, 0x1000000, 0x0, 0x10}])

22:31:23 executing program 1:
prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

22:31:23 executing program 1:
prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0)
eventfd(0x0)

[ 1093.184332][ T5274] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1093.374595][ T5274] usb 5-1: device descriptor read/8, error -61
[ 1093.504518][ T5274] usb usb5-port1: unable to enumerate USB device
22:31:24 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:24 executing program 1:
prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

22:31:24 executing program 3:
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000680)=""/239)

22:31:24 executing program 5:
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)

22:31:24 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000), 0x0, 0x1000000, 0x0, 0x10}])

22:31:24 executing program 5:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x1]}, 0x8, 0x80000)
ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000140)=0x10000)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f0000000280)="bbce6b9f6cce4e84c4b40c1bd71d75ea3f17ef7d5b912ef165e7234214bad340cbf61a221efd3f6efa81a9276bce69035497b7a60b7c2dda1e4de18d62d03ece95a756d70a0c17758c7fa1c070505a2a42b99e4442ae65a4faa0035b191afe5a2cf3f65a291429d179b8695bc0f103ddc15800e627a44f153963d1c5711e49e8cfdbbcb97d59135558af0883b7eefb1e54f7a66b492a06074b", 0x99})
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f00000000c0)={0x0, &(0x7f0000000080)="edefd31932fe6ed6594e9d2bdd0fde05f410230be1744f9aa75e2558501be311b521f92bcb3d587f8af772bd63bb3b4f166c9fcb3e1a3c40b728faca1c4a0d", 0x3f})
syz_clone(0x2a0080, &(0x7f0000001940)="6563797924ef21b587adcb77cf05be3cf0fcea791b59f79183eb42bea8fcba07c0d9c955b20345d319d1ad17614f43e9156b09fc9dc52b0b477dcb61b784d63d8eb27dbcc136e92f32cea57adb3a1c617a18f4e64e3224e347203e7c4dbbf441abfc862e1fcb1c11ffee02d38ba1b0c47d5bfcece0fa1a191171ff03b9ca886e9bb6e1b9e8f9f6b145021b06b12b4070d84b86b982be687d217cf6533aaf38a328c8e64c9a4ed5d11f01402304becee7b4cfeb9d0d88e3ff6e2745a4d55a8bd5428ef1652fdbdd8035d6ad9f619e49a02f0184124b858a59e19af821bc09", 0xde, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="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")

[ 1094.704391][ T5269] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1094.925966][ T5269] usb 5-1: device descriptor read/64, error 18
[ 1095.204283][ T5269] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1095.431690][ T5269] usb 5-1: device descriptor read/64, error 18
[ 1095.554423][ T5269] usb usb5-port1: attempt power cycle
[ 1095.974291][ T5269] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1096.184414][ T5269] usb 5-1: device descriptor read/8, error -61
22:31:26 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:26 executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0)

22:31:26 executing program 3:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0)

22:31:26 executing program 5:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0xffffffff000, 0x2})

22:31:26 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x10}])

22:31:26 executing program 3:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0)

[ 1096.474292][ T5269] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 1096.664593][ T5269] usb 5-1: device descriptor read/8, error -61
[ 1096.794670][ T5269] usb usb5-port1: unable to enumerate USB device
22:31:27 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:27 executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080), 0xc)

22:31:27 executing program 5:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='>', 0x1}], 0x1, 0x0, 0x0)

22:31:27 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)

22:31:27 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x10}])

22:31:27 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x291, 0x0)

[ 1097.734246][ T5274] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1097.984131][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1098.104459][ T5274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1098.115744][ T5274] usb 5-1: config 0 has no interfaces?
[ 1098.121373][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1098.131189][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.143203][ T5274] usb 5-1: config 0 descriptor??
22:31:29 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:29 executing program 1:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f00000013c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

22:31:29 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
read$proc_mixer(r0, 0x0, 0x0)

22:31:29 executing program 5:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x124}}, 0x0)

22:31:29 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x10}])

22:31:29 executing program 3:
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb)

22:31:30 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:30 executing program 5:
add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2, 0x9}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)

22:31:30 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0xf, 0x923a5f647e155291}, 0x10}}, 0x0)

22:31:30 executing program 3:
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001)

[ 1100.450977][T12930] usb 5-1: USB disconnect, device number 77
22:31:30 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x1000000}])

22:31:30 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
syz_open_dev$sndmidi(0x0, 0x0, 0x141101)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
dup(0xffffffffffffffff)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x4}])

[ 1100.964157][T12930] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1101.214131][T12930] usb 5-1: Using ep0 maxpacket: 8
[ 1101.343516][T12930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1101.353831][T12930] usb 5-1: config 0 has no interfaces?
[ 1101.360536][T12930] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1101.370621][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1101.391319][T12930] usb 5-1: config 0 descriptor??
22:31:32 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:32 executing program 5:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_setup(0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:31:32 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x1}, 0x6e)

22:31:32 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnetconf={0x44, 0x52, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x72c}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
listen(r0, 0x20000005)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

22:31:32 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x1000000}])

22:31:32 executing program 1:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

22:31:33 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:33 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnetconf={0x44, 0x52, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x72c}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
listen(r0, 0x20000005)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

22:31:33 executing program 1:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1103.620455][ T5274] usb 5-1: USB disconnect, device number 78
22:31:33 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x1000000}])

22:31:33 executing program 5:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_setup(0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:31:34 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnetconf={0x44, 0x52, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x72c}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
listen(r0, 0x20000005)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1104.274568][ T5274] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1104.534342][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1104.664499][ T5274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1104.676209][ T5274] usb 5-1: config 0 has no interfaces?
[ 1104.682057][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1104.701397][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1104.737973][ T5274] usb 5-1: config 0 descriptor??
22:31:35 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:35 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnetconf={0x44, 0x52, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x72c}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
listen(r0, 0x20000005)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

22:31:35 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

22:31:35 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1402, 0x1}, 0x10}}, 0x0)

22:31:35 executing program 5:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_setup(0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

22:31:35 executing program 2:
fanotify_init(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020)

22:31:36 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010000000109040000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:36 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201080019b40320d812010085de01ec020109021b0001000000000904"], 0x0)

22:31:36 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYRES64=r2])

22:31:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r1, 0x7e4bed618c601c63, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x24}, 0x1, 0x800000000000000}, 0x0)

22:31:36 executing program 5:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_setup(0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

[ 1106.793189][  T918] usb 5-1: USB disconnect, device number 79
22:31:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000100)={0x0, {}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x8f})

22:31:36 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:37 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000001400))

22:31:37 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x10, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYRES64=r2])

[ 1107.128826][ T5274] usb 2-1: new high-speed USB device number 84 using dummy_hcd
22:31:37 executing program 2:
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001380)="448d49d63979", 0x0, 0x0, 0xe39de77022a8b974, 0x0, 0x0})

[ 1107.314284][  T918] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 1107.414410][ T5274] usb 2-1: Using ep0 maxpacket: 32
[ 1107.564345][ T5274] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1107.594108][  T918] usb 5-1: Using ep0 maxpacket: 8
[ 1107.724278][  T918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1107.748897][  T918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1107.758679][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.774955][  T918] usb 5-1: config 0 descriptor??
[ 1107.784317][ T5274] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85
[ 1107.799052][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1107.818080][  T918] iowarrior 5-1:0.0: no interrupt-in endpoint found
[ 1107.831479][ T5274] usb 2-1: Product: syz
[ 1107.857541][ T5274] usb 2-1: Manufacturer: syz
[ 1107.867668][ T5274] usb 2-1: SerialNumber: syz
[ 1107.875595][ T5274] usb 2-1: config 0 descriptor??
[ 1108.125513][ T5274] usb 2-1: USB disconnect, device number 84
22:31:39 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010000000109040000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:39 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x20002, 0x0)
write$sequencer(r0, &(0x7f0000000140)=[@v={0x93, 0x0, 0x90}], 0x8)

22:31:39 executing program 2:
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="a8ff5a82ee0e", 0x0, 0x80008000, 0x0, 0x0, 0x0})

22:31:39 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400b59500000000000000000a570000", @ANYRES32=r2, @ANYBLOB="14000100fc"], 0x48}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0)

22:31:39 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x10, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, 0x0)

[ 1109.886561][T12935] usb 5-1: USB disconnect, device number 80
[ 1109.942151][T19359] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
22:31:40 executing program 2:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0xa)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c85012000e00a4c3229fd6d2f50010"], 0x17)
syz_emit_vhci(&(0x7f0000000a80)=@HCI_SCODATA_PKT={0x3, {0x1, 0x7e}, "2737229cf32ef8a6524b1842850e34dd38ae96c991af40154bcd64493b1c66e98d2b58ea6c0c4e1e83b00951c4f2292d8369cb06836d1d067203d4b0049db04cdf755b52a2cd451612bf5880367fac0fc2ea0ac32683b05277d8142cc9c2bfee1b9b9fae7e3e116637fc28df87e2a17a4d3bf7c8187a8349a5065c007de9"}, 0x82)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x26}}}, 0x4)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1f}, "aff1a43b8a04f430bf484a2b92d8c58a6fd42fc59316c5f6b3267ac81a4518"}, 0x23)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r0=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@remote}, &(0x7f0000000340)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000c00)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="8000001000000008000007614a2400280065000020049078e0000002e0000002440ccfbd730101020000959c860744fa8ce48d006ec42f857a9cda84411595f5636be73a0874c8e66773c992d2ae69b7ec135c7d28462c4dd13e054043f9689c39df5323485ec9b9716b489aabbb856d35137019aecb332cec2d427dbd0f8745a92195868edd0af9d6242822c6774cae5aebdb1c7c75641dee08abf9f5f2ffac567663a0f4a7662afea6eb478a18940c010cf51fcebcb36c8ec3de58734a5e7015b12e20e20a"]})
accept4(0xffffffffffffffff, &(0x7f00000005c0)=@xdp, &(0x7f0000000680)=0x80, 0x800)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004020}, 0x4008000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'macvlan1\x00'})
socket(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x419}}}, 0x7)

22:31:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000002340)={{0x0, 0x0, 0x80}})

22:31:40 executing program 3:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000004c0)='.\x00', 0xd080010d)

22:31:40 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001c80), 0x80002, 0x0)
write$FUSE_LK(r0, 0x0, 0xfffffea5)

22:31:40 executing program 2:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
setns(r0, 0x0)

22:31:40 executing program 1:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000004c0)='.\x00', 0x90000001)

[ 1110.066529][ T5064] Bluetooth: hci4: SCO packet for unknown connection handle 1
[ 1110.374458][T12935] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 1110.634228][T12935] usb 5-1: Using ep0 maxpacket: 8
[ 1110.775650][T12935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1110.787456][T12935] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1110.797326][T12935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.816127][T12935] usb 5-1: config 0 descriptor??
[ 1110.866451][T12935] iowarrior 5-1:0.0: no interrupt-in endpoint found
22:31:43 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010000000109040000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:43 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x1f, 0xc0, 0x30, 0x10, 0x4b8, 0x522, 0x6031, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0x9c, 0xcd}}]}}]}}, 0x0)

22:31:43 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000015c0)={&(0x7f00000001c0), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)
sendto$unix(r1, &(0x7f0000000040)="e1", 0x1, 0x0, 0x0, 0x0)

22:31:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000044, &(0x7f0000000040), 0x1c)

22:31:43 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000080))

22:31:43 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x10, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[ 1113.004710][ T5274] usb 5-1: USB disconnect, device number 81
22:31:43 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0)
read$FUSE(r0, 0x0, 0x50)

22:31:43 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
write$cgroup_netprio_ifpriomap(r0, 0x0, 0xa)

22:31:43 executing program 1:
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f00000004c0)='.\x00', 0x90000001)
inotify_rm_watch(r0, r1)

22:31:43 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000001c0), 0x0)

22:31:43 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0, 0x36}}], 0x1, 0x0)

22:31:43 executing program 1:
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f00000004c0)='.\x00', 0x90000001)
inotify_rm_watch(r0, r1)

[ 1113.344129][T12930] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1113.514276][ T5274] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 1113.584146][T12930] usb 4-1: Using ep0 maxpacket: 16
[ 1113.774138][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1113.864559][T12930] usb 4-1: New USB device found, idVendor=04b8, idProduct=0522, bcdDevice=60.31
[ 1113.873742][T12930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.883763][T12930] usb 4-1: Product: syz
[ 1113.888072][T12930] usb 4-1: Manufacturer: syz
[ 1113.893338][T12930] usb 4-1: SerialNumber: syz
[ 1113.904721][ T5274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1113.907410][T12930] usb 4-1: config 0 descriptor??
[ 1113.929442][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1113.942938][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.962947][ T5274] usb 5-1: config 0 descriptor??
[ 1113.963187][T12930] pl2303 4-1:0.0: required endpoints missing
[ 1114.006473][ T5274] iowarrior 5-1:0.0: no interrupt-in endpoint found
[ 1114.136461][ T5064] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1114.145498][ T5064] Bluetooth: hci4: Injecting HCI hardware error event
[ 1114.156103][ T5064] Bluetooth: hci4: hardware error 0x00
[ 1114.173866][ T5274] usb 4-1: USB disconnect, device number 25
22:31:46 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:46 executing program 5:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0xff})
fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x2})

22:31:46 executing program 2:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0)
r2 = dup(r1)
write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0)
renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x1)

22:31:46 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:46 executing program 1:
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f00000004c0)='.\x00', 0x90000001)
inotify_rm_watch(r0, r1)

22:31:46 executing program 3:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x2, 0x2, 0x9, 0xffffffffffffffff})

[ 1116.096010][T11807] usb 5-1: USB disconnect, device number 82
22:31:46 executing program 3:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xff})
fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x2})

22:31:46 executing program 2:
mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0)

[ 1116.214506][ T5064] Bluetooth: hci4: Opcode 0x c03 failed: -110
22:31:46 executing program 1:
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f00000004c0)='.\x00', 0x90000001)
inotify_rm_watch(r0, r1)

22:31:46 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000280)=@framed={{}, [@alu={0x0, 0x0, 0x4}, @exit]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, 0x0}, 0x80)

22:31:46 executing program 3:
bpf$PROG_LOAD(0xc, 0x0, 0x0)

22:31:46 executing program 5:
syz_clone(0xa040200, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1116.604164][T11807] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 1116.857092][T11807] usb 5-1: Using ep0 maxpacket: 8
[ 1116.974224][T11807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1116.984687][T11807] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1116.997881][T11807] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1117.007145][T11807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.018486][T11807] usb 5-1: config 0 descriptor??
[ 1117.056284][T11807] iowarrior 5-1:0.0: no interrupt-in endpoint found
22:31:49 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:49 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:31:49 executing program 2:
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x9, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20)

[ 1119.200119][ T5269] usb 5-1: USB disconnect, device number 83
22:31:49 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:49 executing program 3:
syz_clone(0xa844000, 0x0, 0x0, 0x0, 0x0, 0x0)

22:31:49 executing program 5:
syz_clone(0x14104100, 0x0, 0x0, 0x0, 0x0, 0x0)

22:31:49 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

22:31:49 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340))

22:31:49 executing program 5:
syz_clone(0xc0140100, &(0x7f0000000000)="ad91da37978a2a52e1c7b72c3d185ccf3efe7dcbdf21d7bf9a139235ddbb24bcdf8d1fefeae3c2f957d4521057414c07513546d16f566ed30bb0bba1d7b37ec0223394627c5115acb625363f1e0dfda115b320adbed724070a", 0x59, 0x0, 0x0, &(0x7f0000000340))

22:31:49 executing program 3:
bpf$PROG_LOAD(0x8, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)

22:31:49 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:31:49 executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
r1 = syz_clone(0x40000000, &(0x7f0000002180)="935c1a02eb08a69601b3702b1d5e8ed9a3a192b60755022fc09cea672af0ed", 0x1f, &(0x7f0000002200), &(0x7f0000002240), &(0x7f00000042c0)="0b197ca2e5f14635516d63f48fc2d894ed9a077d125b55f1c9addf1dc27d176677593a01a206dfa326690522d2d3e23e02e1a663268f95087488")
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000044c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004480)={&(0x7f0000004380)={0xd4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x401, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$FUSE_BMAP(r3, 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8800)

[ 1119.734226][ T5269] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 1119.984618][ T5269] usb 5-1: Using ep0 maxpacket: 8
[ 1120.104409][ T5269] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1120.120507][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1120.151285][ T5269] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1120.169002][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.195017][ T5269] usb 5-1: config 0 descriptor??
[ 1120.246816][ T5269] iowarrior 5-1:0.0: no interrupt-in endpoint found
[ 1121.022944][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.029536][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
22:31:52 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:52 executing program 3:
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)

22:31:52 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$link(0x8, 0x0, r1)

[ 1122.333320][ T5269] usb 5-1: USB disconnect, device number 84
22:31:52 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:52 executing program 5:
syz_clone(0xc0140100, &(0x7f0000000000)="ad91da37978a2a52e1c7b72c3d185ccf3efe7dcbdf21d7bf9a139235ddbb24bcdf8d1fefeae3c2f957d4521057414c07513546d16f566ed30bb0bba1d7b37ec0223394627c5115acb625363f1e0dfda115b320adbed724070a", 0x59, 0x0, 0x0, &(0x7f0000000340))

22:31:52 executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
r1 = syz_clone(0x40000000, &(0x7f0000002180)="935c1a02eb08a69601b3702b1d5e8ed9a3a192b60755022fc09cea672af0ed", 0x1f, &(0x7f0000002200), &(0x7f0000002240), &(0x7f00000042c0)="0b197ca2e5f14635516d63f48fc2d894ed9a077d125b55f1c9addf1dc27d176677593a01a206dfa326690522d2d3e23e02e1a663268f95087488")
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000044c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004480)={&(0x7f0000004380)={0xd4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x401, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$FUSE_BMAP(r3, 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8800)

22:31:52 executing program 2:
keyctl$join(0x1, 0x0)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='@!0@/*\x00', 0xfffffffffffffffe)

22:31:52 executing program 3:
request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0)

22:31:52 executing program 3:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440))

22:31:52 executing program 2:
syz_io_uring_setup(0x4553, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300))

22:31:52 executing program 3:
prctl$PR_CAPBSET_DROP(0x18, 0xd6)

22:31:52 executing program 2:
syz_clone3(&(0x7f00000004c0)={0x180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 1122.854359][ T5269] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1123.114121][ T5269] usb 5-1: Using ep0 maxpacket: 8
[ 1123.244542][ T5269] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1123.274761][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1123.317684][ T5269] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1123.342293][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.375431][ T5269] usb 5-1: config 0 descriptor??
[ 1123.426228][ T5269] iowarrior 5-1:0.0: no interrupt-in endpoint found
22:31:55 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:55 executing program 3:
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x181001, 0x0)

22:31:55 executing program 2:
r0 = gettid()
syz_clone3(&(0x7f0000000200)={0x8000000, 0x0, 0x0, &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0], 0x1}, 0x58)

[ 1125.491790][T15190] usb 5-1: USB disconnect, device number 85
22:31:55 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:55 executing program 5:
mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000015c0)='syz1\x00', 0x1ff)

22:31:55 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0)

22:31:55 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)

22:31:55 executing program 2:
r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000140)=""/4096)

22:31:55 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

22:31:55 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)

22:31:55 executing program 2:
syz_clone(0xba209546, 0x0, 0x0, 0x0, 0x0, 0x0)

22:31:55 executing program 3:
syz_clone(0x70021080, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

[ 1125.944349][T15190] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1126.204194][T15190] usb 5-1: Using ep0 maxpacket: 8
[ 1126.303231][ T5269] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1126.324533][T15190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1126.339190][T15190] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1126.362713][T15190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.393582][T15190] usb 5-1: config 0 descriptor??
[ 1126.447174][T15190] iowarrior 5-1:0.0: no interrupt-in endpoint found
[ 1126.574276][ T5269] usb 2-1: Using ep0 maxpacket: 8
[ 1126.704359][ T5269] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1126.715472][ T5269] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1126.727461][ T5269] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[ 1126.737818][ T5269] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[ 1126.904367][ T5269] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1126.913719][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1126.922261][ T5269] usb 2-1: Product: syz
[ 1126.926726][ T5269] usb 2-1: Manufacturer: syz
[ 1126.931403][ T5269] usb 2-1: SerialNumber: syz
[ 1127.177860][T19522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1127.185960][T19522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1127.434701][ T5269] cdc_ncm 2-1:1.0: bind() failure
[ 1127.454250][ T5269] cdc_ncm: probe of 2-1:1.1 failed with error -71
[ 1127.474246][ T5269] cdc_mbim: probe of 2-1:1.1 failed with error -71
[ 1127.496927][ T5269] usbtest: probe of 2-1:1.1 failed with error -71
[ 1127.512501][ T5269] usb 2-1: USB disconnect, device number 85
22:31:58 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000a00)={@mcast1}, 0x14)

22:31:58 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='children\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
lseek(r0, 0x2, 0x0)

22:31:58 executing program 5:
r0 = socket(0xa, 0x3, 0x2)
sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, 0x0}, 0x0)

22:31:58 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:31:58 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:31:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000840))

[ 1128.582948][ T5269] usb 5-1: USB disconnect, device number 86
22:31:58 executing program 3:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0xce842, 0x0)

22:31:58 executing program 5:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

22:31:58 executing program 1:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

22:31:58 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xde, 0xf4, 0x24, 0x10, 0x5050, 0xe00, 0xeff4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8c, 0x95, 0x4, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}, {{0x9, 0x5, 0x7, 0x2}}]}}]}}]}}, 0x0)

22:31:58 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "ed"}}, 0x4)

22:31:58 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:31:58 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0xbd, 0x4e}]})

22:31:59 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "ed"}}, 0x4)

22:31:59 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

[ 1129.094452][ T5269] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1129.224184][ T5274] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1129.344204][ T5269] usb 5-1: Using ep0 maxpacket: 8
22:31:59 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[ 1129.464419][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1129.479004][ T5269] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1129.494400][ T5274] usb 3-1: Using ep0 maxpacket: 16
[ 1129.499712][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.523864][ T5269] usb 5-1: config 0 descriptor??
[ 1129.576373][ T5269] iowarrior 5-1:0.0: no interrupt-in endpoint found
[ 1129.644402][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 1129.659260][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1129.669082][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1129.678954][ T5274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1129.688773][ T5274] usb 3-1: New USB device found, idVendor=5050, idProduct=0e00, bcdDevice=ef.f4
[ 1129.698023][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.717392][ T5274] usb 3-1: config 0 descriptor??
[ 1129.766187][ T5274] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[ 1129.775720][ T5274] ftdi_sio ttyUSB0: unknown device type: 0xeff4
[ 1129.971129][  T918] usb 3-1: USB disconnect, device number 28
[ 1129.986296][  T918] ftdi_sio 3-1:0.0: device disconnected
22:32:01 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:01 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f]}}, &(0x7f0000000200)=""/241, 0x2b, 0xf1, 0x1}, 0x20)

[ 1131.697033][  T918] usb 5-1: USB disconnect, device number 87
22:32:01 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "ed"}}, 0x4)

22:32:01 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:32:01 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000), &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:01 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000200)=""/241, 0x2b, 0xf1, 0x1}, 0x20)

22:32:01 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:32:01 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000200)=""/241, 0x2b, 0xf1, 0x1}, 0x20)

22:32:01 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x8, 0x0, 0x0, 0x0}, 0x20)

22:32:01 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "ed"}}, 0x4)

22:32:02 executing program 1:
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:32:02 executing program 2:
syz_clone(0x21821100, 0x0, 0x5e, 0x0, 0x0, 0x0)

[ 1132.284369][  T918] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1132.544584][  T918] usb 5-1: Using ep0 maxpacket: 8
[ 1132.704260][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1132.714211][  T918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1132.723435][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.740950][  T918] usb 5-1: config 0 descriptor??
[ 1132.786929][  T918] iowarrior 5-1:0.0: no interrupt-in endpoint found
22:32:04 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:04 executing program 5:

22:32:04 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000200)=""/241, 0x2b, 0xf1, 0x1}, 0x20)

22:32:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="5aa8fe000000002e1fbd4d4dce5e0d0f03080001e5fffffffffffc3018ae0d795cd75f911bf664"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

22:32:04 executing program 1:
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:32:04 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000), &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[ 1134.855558][ T5274] usb 5-1: USB disconnect, device number 88
22:32:04 executing program 1:
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:32:05 executing program 5:

22:32:05 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:32:05 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x378, 0x238, 0x238, 0x378, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)

22:32:05 executing program 5:

22:32:05 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x90b}]}}}]}, 0x44}}, 0x0)

[ 1135.324244][ T5274] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1135.574142][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1135.724302][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1135.735510][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1135.750415][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1135.759915][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.772312][ T5274] usb 5-1: config 0 descriptor??
[ 1136.036291][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1136.253738][ T5274] usb 5-1: USB disconnect, device number 89
[ 1136.277025][ T5274] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:32:06 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:06 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:32:06 executing program 5:
syz_emit_vhci(0x0, 0x0)

22:32:06 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
open(0x0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

22:32:06 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

22:32:06 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000), &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:06 executing program 5:
syz_emit_vhci(0x0, 0x0)

[ 1136.859094][T19630] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1136.885784][T19630] batman_adv: batadv0: Adding interface: team0
[ 1136.913450][T19630] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
22:32:07 executing program 5:
syz_emit_vhci(0x0, 0x0)

[ 1137.045485][T19630] batman_adv: batadv0: Interface activated: team0
[ 1137.083566][T19630] batman_adv: batadv0: Interface deactivated: team0
22:32:07 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3)

[ 1137.114938][ T5274] usb 5-1: new high-speed USB device number 90 using dummy_hcd
22:32:07 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:32:07 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3)

[ 1137.296520][T19635] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[ 1137.321690][T19635] batman_adv: batadv0: Adding interface: team0
22:32:07 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[ 1137.361194][T19635] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1137.374187][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1137.401528][T19635] batman_adv: batadv0: Interface activated: team0
[ 1137.478470][T19635] batman_adv: batadv0: Interface deactivated: team0
[ 1137.524527][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1137.546997][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1137.582390][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1137.613703][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1137.657162][ T5274] usb 5-1: config 0 descriptor??
[ 1137.784369][T19644] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[ 1137.816863][T19644] batman_adv: batadv0: Removing interface: team0
[ 1137.837278][T19644] bridge0: port 3(team0) entered blocking state
[ 1137.851956][T19644] bridge0: port 3(team0) entered disabled state
[ 1137.867208][T19644] team0: entered allmulticast mode
[ 1137.875212][T19644] team_slave_0: entered allmulticast mode
[ 1137.885915][T19644] team_slave_1: entered allmulticast mode
[ 1137.895293][T19644] team0: entered promiscuous mode
[ 1137.900510][T19644] team_slave_0: entered promiscuous mode
[ 1137.907905][T19644] team_slave_1: entered promiscuous mode
[ 1137.921474][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1137.957983][T19644] bridge0: port 3(team0) entered blocking state
[ 1137.964717][T19644] bridge0: port 3(team0) entered forwarding state
[ 1137.971861][T19644] 8021q: adding VLAN 0 to HW filter on device team0
[ 1137.979930][T19658] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1138.141079][  T918] usb 5-1: USB disconnect, device number 90
[ 1138.165211][  T918] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:32:08 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:08 executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

22:32:08 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3)

22:32:08 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
open(0x0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

22:32:08 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, 0x0, 0x0)

22:32:08 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:08 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendto$inet6(r0, &(0x7f0000001300)='o', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="cd", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)

[ 1138.739108][T19668] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
22:32:08 executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

[ 1138.781497][T19668] team0: left allmulticast mode
[ 1138.808020][T19668] team_slave_0: left allmulticast mode
[ 1138.813876][T19668] team_slave_1: left allmulticast mode
[ 1138.822087][T19668] team0: left promiscuous mode
[ 1138.830089][T19668] team_slave_0: left promiscuous mode
[ 1138.873253][T19668] team_slave_1: left promiscuous mode
[ 1138.881182][T19668] bridge0: port 3(team0) entered disabled state
[ 1138.907339][T19668] batman_adv: batadv0: Adding interface: team0
22:32:09 executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

[ 1138.918270][T19668] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
22:32:09 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x6a2f4bcadd1bd6dd, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0)

[ 1139.021063][T19668] batman_adv: batadv0: Interface activated: team0
[ 1139.028526][  T918] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1139.047989][T19668] batman_adv: batadv0: Interface deactivated: team0
22:32:09 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, 0x0, &(0x7f0000000240))

22:32:09 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, 0x0, &(0x7f0000000240))

[ 1139.216737][T19675] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[ 1139.274360][  T918] usb 5-1: Using ep0 maxpacket: 8
[ 1139.303946][T19675] batman_adv: batadv0: Removing interface: team0
[ 1139.329384][T19675] bridge0: port 3(team0) entered blocking state
[ 1139.345592][T19675] bridge0: port 3(team0) entered disabled state
[ 1139.356730][T19675] team0: entered allmulticast mode
[ 1139.362276][T19675] team_slave_0: entered allmulticast mode
[ 1139.369106][T19675] team_slave_1: entered allmulticast mode
[ 1139.380500][T19675] team0: entered promiscuous mode
[ 1139.386127][T19675] team_slave_0: entered promiscuous mode
[ 1139.400844][T19675] team_slave_1: entered promiscuous mode
[ 1139.407498][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1139.427676][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1139.457440][T19675] bridge0: port 3(team0) entered blocking state
[ 1139.463980][T19675] bridge0: port 3(team0) entered forwarding state
[ 1139.472036][  T918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1139.488975][T19675] 8021q: adding VLAN 0 to HW filter on device team0
[ 1139.497852][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1139.529622][  T918] usb 5-1: config 0 descriptor??
[ 1139.798295][  T918] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1140.002726][T15190] usb 5-1: USB disconnect, device number 91
[ 1140.026237][T15190] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:32:10 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:10 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, 0x0, &(0x7f0000000240))

22:32:10 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)

22:32:10 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

22:32:10 executing program 2:
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

22:32:10 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:10 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000020900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)

22:32:10 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

22:32:10 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:10 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)

22:32:10 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

22:32:10 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x5, 0x8000000000020001, 0xffff, 0x2})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000440)={&(0x7f00000007c0)="fe2e4c30937c6313f3167b43e44d121543d9788313f80fef624cb8469510147a5e1bd89a9f6b222a0f1feb0bd8a0f7f206e0cb5f59f2588d91255f09643f5d6b0a8057939ed859e54e1b7089d03a6171651782deba877427d6e3e923bd071e4ca44b5fc549fbe08813dd40b9f5d0d8a7300a6ed98f", 0x75})
ptrace$cont(0x420b, r1, 0x20008, 0x0)
ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000900)={&(0x7f0000000840)="02be5564bb73533b697fe8fb044ef1aa292763c1e6eb2a655f151ad96accacc82c5515bd04bb3467f9cc9069dc4f46fd65d728fae6c788db182c2f0c9f907d83ed02a2102ef8497e7bd33428649a25ad7ca52d0ff0a3faf9540de9871ebc5f009787b2018bad2907de5c52c3b853ea536536ad01f91c999b06270c54c170b43a42830221ed5dbfb28aac30eee9bbb0a75c6fd12fcf46167f51a6d9427ddc6275f06843e3452c46feefd9cb870cefdbb690180dc07e4bdd", 0xb7})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000380)={&(0x7f0000000280)="4ebbef299b31fb28c582b8404c4a8d89a90599e21704d328d7b2a3cec60e45faf8f84d95b999aa60645dd0aa0060fad85f27b121f3428c59b37f41c6f894dada64669c08a377141b900b18460e800bdc967ef25d5710247cbdd672f0bf1f997c2d0dbde9029929b404774bac3f0dc62bab208a47eac38bb3591875124d5694cf866226a18bb13d658ff63da24ad954d732bd100884bc451d24b5d71f10d060d0", 0xa0})
ptrace$cont(0x1f, r2, 0x8, 0x80)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r3 = epoll_create(0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f00000001c0))
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)

[ 1140.894465][ T5274] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1141.064160][ T5269] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1141.164179][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1141.304342][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1141.314576][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1141.331207][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1141.340646][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.351100][ T5274] usb 5-1: config 0 descriptor??
[ 1141.424698][ T5269] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1141.443819][ T5269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.458991][ T5269] usb 6-1: config 0 descriptor??
[ 1142.164382][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1143.294286][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1143.305274][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[ 1143.315976][ T5269] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1143.332553][ T5269] usb 6-1: USB disconnect, device number 37
22:32:13 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:13 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)

22:32:13 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

22:32:13 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fc_commit_start\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x32600)

22:32:13 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:13 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1143.635984][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1143.684432][ T5274] usb 5-1: USB disconnect, device number 92
22:32:13 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fc_commit_start\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x3ff07)

22:32:13 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)

22:32:13 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[ 1143.781159][ T5274] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:32:13 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:13 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000404355470000000000000109022400010000000009040000010300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0)

[ 1143.954177][  T918] usb 6-1: new high-speed USB device number 38 using dummy_hcd
22:32:14 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1144.164243][T15190] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1144.184454][ T5274] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1144.214541][  T918] usb 6-1: Using ep0 maxpacket: 8
[ 1144.304223][ T9670] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1144.334386][  T918] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1144.343507][  T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.369119][  T918] usb 6-1: config 0 descriptor??
[ 1144.434337][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1144.544774][T15190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1144.562928][T15190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1144.574439][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1144.587791][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1144.597689][T15190] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1144.607922][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.616210][T15190] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 1144.634494][ T5274] usb 5-1: config 0 descriptor??
[ 1144.714386][ T9670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1144.725925][ T9670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1144.737269][ T9670] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[ 1144.746629][ T9670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.757960][ T9670] usb 2-1: config 0 descriptor??
[ 1144.804388][T15190] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1144.818528][T15190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.827045][T15190] usb 3-1: Product: syz
[ 1144.831416][T15190] usb 3-1: Manufacturer: syz
[ 1144.836500][T15190] usb 3-1: SerialNumber: syz
[ 1145.084358][  T918] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1145.304283][ T9670] usbhid 2-1:0.0: can't add hid device: -71
[ 1145.311025][ T9670] usbhid: probe of 2-1:0.0 failed with error -71
[ 1145.329134][ T9670] usb 2-1: USB disconnect, device number 86
[ 1145.972091][T15190] cdc_ncm 3-1:1.0: bind() failure
[ 1146.004777][T15190] cdc_ncm: probe of 3-1:1.1 failed with error -71
[ 1146.024385][T15190] cdc_mbim: probe of 3-1:1.1 failed with error -71
[ 1146.054353][T15190] usbtest: probe of 3-1:1.1 failed with error -71
[ 1146.064829][T15190] usb 3-1: USB disconnect, device number 29
[ 1146.204688][  T918] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1146.219564][  T918] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[ 1146.229603][  T918] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1146.242645][  T918] usb 6-1: USB disconnect, device number 38
22:32:16 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:16 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:16 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:16 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)

22:32:16 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:16 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0)
dup3(r0, r1, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[], 0x2d)

[ 1146.780222][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:32:16 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:16 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
write$FUSE_LK(r2, 0x0, 0x0)

22:32:16 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)=']\x00', 0x0)
r1 = inotify_init()
r2 = fcntl$dupfd(r0, 0x0, r1)
write$FUSE_NOTIFY_STORE(r2, 0x0, 0x0)

[ 1146.842612][ T5274] usb 5-1: USB disconnect, device number 93
[ 1146.931545][ T5274] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:32:17 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/161, &(0x7f0000000140)=0xa1)

22:32:17 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{}, "49fdbc22baf74900", "c55b88f962c51aeab016412940b9a280", "7705e23e", "d4d5aa4581175c2d"}, 0x28)

[ 1147.074241][ T9670] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1147.334287][ T9670] usb 6-1: Using ep0 maxpacket: 8
[ 1147.344361][ T5274] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1147.475767][ T9670] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1147.494200][ T9670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1147.523365][ T9670] usb 6-1: config 0 descriptor??
[ 1147.614165][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1147.744376][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1147.756982][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1147.766596][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1147.777182][ T5274] usb 5-1: config 0 descriptor??
[ 1148.224366][ T9670] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1149.364232][ T9670] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1149.374987][ T9670] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[ 1149.387223][ T9670] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1149.397796][ T9670] usb 6-1: USB disconnect, device number 39
22:32:19 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:19 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:19 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f00000008c0), 0x105400, 0x0)

22:32:19 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = dup(r0)
getsockname$unix(r1, 0x0, &(0x7f00000001c0))

22:32:19 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:19 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1149.886148][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:32:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x14, 0x4)

22:32:20 executing program 1:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800410, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_getscheduler(r0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f0000000d00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
r6 = socket(0x2, 0x3, 0x100000001)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
write$binfmt_misc(r4, &(0x7f0000000300)=ANY=[], 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)

22:32:20 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1149.961637][ T5274] usb 5-1: USB disconnect, device number 94
[ 1150.038634][ T5274] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:32:20 executing program 2:
r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00'}, 0x45c)
write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00'}, 0x45c)

22:32:20 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:20 executing program 3:
socket$inet6(0xa, 0x40000080806, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1150.234240][ T5269] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1150.414300][ T5274] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1150.504256][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1150.644517][ T5269] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1150.653799][ T5269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.664216][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1150.670915][ T5269] usb 6-1: config 0 descriptor??
[ 1150.784608][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1150.806389][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1150.818042][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.837305][ T5274] usb 5-1: config 0 descriptor??
[ 1151.106754][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1151.311228][T12934] usb 5-1: USB disconnect, device number 95
[ 1151.332789][T12934] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1151.364262][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
22:32:21 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:21 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:21 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[], 0xffffff46)
dup3(r1, r0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000300)=ANY=[], 0x10}], 0x1}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0)
rt_sigreturn()
prlimit64(0x0, 0x7, &(0x7f0000000100)={0x80000001, 0xfffffffffffffff8}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00')
fcntl$lock(r2, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0)

22:32:21 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:21 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'wg0\x00'})

[ 1152.224274][T12930] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1152.474336][T12930] usb 5-1: Using ep0 maxpacket: 8
[ 1152.494323][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1152.508244][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[ 1152.518671][ T5269] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1152.529883][ T5269] usb 6-1: USB disconnect, device number 40
22:32:22 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

22:32:22 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0xc007}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@hopopts={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra]}}}], 0x28}}], 0x1, 0x0)

22:32:22 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:22 executing program 2:
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="15", 0x1, 0xffffffffffffffff)

[ 1152.594348][T12930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1152.615057][T12930] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1152.645413][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1152.676213][T12930] usb 5-1: config 0 descriptor??
22:32:22 executing program 1:
socketpair(0x10, 0x5, 0x0, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
syz_clone(0x40825400, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))

22:32:22 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:22 executing program 2:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0)
fstat(r0, &(0x7f0000000200))

[ 1152.936937][T12930] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1153.046690][  T918] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1153.142450][ T5274] usb 5-1: USB disconnect, device number 96
[ 1153.179823][ T5274] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1153.305149][  T918] usb 6-1: Using ep0 maxpacket: 8
[ 1153.424452][  T918] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1153.433613][  T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1153.453622][  T918] usb 6-1: config 0 descriptor??
22:32:23 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f0000000380)=ANY=[])

22:32:23 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)

22:32:23 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:23 executing program 1:
syz_clone(0x41ac000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)

22:32:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000e000000100002"], 0x4c}}, 0x0)

[ 1154.044142][T12930] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1154.174353][  T918] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1154.304175][T12930] usb 5-1: Using ep0 maxpacket: 8
[ 1154.444316][T12930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1154.475097][T12930] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1154.496030][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.525058][T12930] usb 5-1: config 0 descriptor??
[ 1154.664210][  T918] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1154.675048][  T918] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1154.686331][  T918] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1154.704642][  T918] usb 6-1: USB disconnect, device number 41
[ 1154.787041][T12930] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1154.993712][  T918] usb 5-1: USB disconnect, device number 97
[ 1155.034324][  T918] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:32:25 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

22:32:25 executing program 1:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8602, 0x0)

22:32:25 executing program 2:
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, &(0x7f00000000c0)={0x200, 0x84d})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0xffff, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000003e3ff000000000000ea04850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)

22:32:25 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:25 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:25 executing program 1:
syz_clone(0x2048180, 0x0, 0x0, 0x0, 0x0, 0x0)

22:32:25 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "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"}, 0x76d)

22:32:25 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, 0x0)

22:32:25 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:25 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1155.524139][  T918] usb 6-1: new high-speed USB device number 42 using dummy_hcd
22:32:25 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1155.764195][  T918] usb 6-1: Using ep0 maxpacket: 8
22:32:25 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1155.884589][  T918] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1155.884669][  T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1155.887517][  T918] usb 6-1: config 0 descriptor??
[ 1155.904430][ T9670] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1156.145419][ T9670] usb 5-1: Using ep0 maxpacket: 8
[ 1156.265353][ T9670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1156.265422][ T9670] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1156.265461][ T9670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1156.267739][ T9670] usb 5-1: config 0 descriptor??
[ 1156.536580][ T9670] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1156.584291][  T918] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1156.742705][ T9670] usb 5-1: USB disconnect, device number 98
[ 1156.761325][ T9670] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1157.074255][  T918] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1157.085067][  T918] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1157.094988][  T918] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1157.113032][  T918] usb 6-1: USB disconnect, device number 42
22:32:27 executing program 2:
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, &(0x7f00000000c0)={0x200, 0x84d})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0xffff, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000003e3ff000000000000ea04850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)

22:32:27 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:27 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:27 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "ac4ebd60f31d970ea7ac476c07f000577731a7eb4126d8f36850255139efbc1c2f9a1718de81739bad029a232efb4aa9a41d576caa5a1e44b9b8097a4b5560b35898526af2431c1c3010f9311b0386e72124b8342bf2c7c5a815fb08221bde816efd2a4b7a969be7caa83c5f1b931506da9c59970f99c9eb97f19f6a25734013d40cb12637c5d8111af954255d65f261bbcc4d27074bf1221c4c40dd7d6d12f6cc7cfdbcdce006ad3e06a6858f72a9274d602e3c7aea7b47cfce79a8cf731855c7dbc0643e291838b4e3c81fff8fb5b0b196222601dd48983a52909dca47d1671ed7d44f6ce5d25b2178eee5692e84046dfc3e05d96d7413dac20b45e3da3521212bcdec1ffff1f399fac822c2f009fb18a13745f7962a43c095e2a31f7957bf41015875197913ed6056a1da7ea0585273c75fe597ec484c02d079cb45487da8ae6ceee95f7cf39374e4c67f3d9f51b917d76b8f1bbd433a6335421763e7682ae0d764af7320e4016fb0078a3fdc091d7bf10110b26bf842909595840b4f2b6677fbe10f8216fbb22f0cc7f3cd129b7e5d447d59daba421a13616fc406d57ea52e38867a864d5a1c9a1ef90709f8b08e6e9fb0baf9eb1ff1f9283421c94e9e19ac7e5fac343c804c9a040249affcd51b869a07a81f577d845bc7928a8163f833bd96d963480a0fb67992069ce8ed1b6a8da1f386223d1c041b9cc5f5e6c2946ff0f097e412c22c255088fccbe5368e7004a7fe17737313491ddcd6598cedb43857a6c903bd45245fd70d261731608f03a29575d5bc62f1e919cb215599afb3fdb8049c0624328d5fe2874b81b7b0b5b8e56f9c1c0db6e35124a9384626220cfe07d4385eadb2cbebe6aaa14907633fe05c87c3a6d64c144c529402417afcf839b8930ae0912506a5442bb8c47f56f9d083cf678b69a05bb46b388712482ec5f317b0ae709cf6d6722b0d928bc88dbd9fc9e66db16c4e13023196261b22e77a1f8c98ea2b5094d2ea99358850b5df5578b605156e45fd27173d396f27bcf010a92837c13e6df868987db0ecf0f074c5b4ff0bbde1ae3a2d2b03ba708309fbe3e8e68a5ecf6729eb5a0bc12255688feae2cf1e2c11cf8e09fbf3ca30cc3efd8c564cc50b3d408babc82de6fcd6e8429d65cf7acdcbe005dd5fb168abf05e02c8aedb76e4e1bb8fbd136108b18b841db421f9f609757499466821edcd2f5bedd2d7e3b25bbc1cfeaa7c4cecccfa36301e249f3e1a30f4d7f68c81c94ec0c35f2380e1b4fddc20ea3975a3f36f80e2d24e6c001779a1cdda720876bef6fe0cfdfea83c71b9c7085d34cf9931b7c4b29ae7dccb823fc92de0313aa76d25f67330b79d762e96e0d2514f82b2382066f72c05f6108ea89c9649d7637f2fb9939fe145cc739714988540af5724042c3c39586f6deea5919bf8af127cf9ed74f2c66e19f3ec8685442f0956c74afcc1797cba8a5287974557ba871ae4833fe3eba306a997602eca614e4fdba300f513e0c9131912f1536d2b94be0f078fc0707d3ae0755bfba8de15d6f0bb57f2b80494dd796c554fcefd061fd793d8b027fd974e198ca41190db1c38a0be96f01eb8b266e95ed67ee2cace2f2f47c859234659e8ea6876cb6942d7751936ce99a7e17f215362c5155789ba3e12d45340c549082f96d007709d1e9dd35a395590c23faeafc2b6e417d88dc67debae5879d178dee7be98eeb103e0ed7cf9cc18e548b72c5ab210132539d56d2ce79da117b47a9b62f065bd891b6e3ac29dee1c8e38f339ea99b1c89cdb237d38e0f51a8fab17756bfe4c861e9c152d92cf213e8a8c783c7f830ee2da5938f292420c875d7117e460f7d916ea72c296ec8d71b31a0b8f99caf97f5f9c769d0f5e766718dd6f1dd0d0d9bd414ab291da23fd568db77bb061f100947567b88a8d50031bbe11623b0e8fc16253dfae9d642f0b329f9ad27c662739fc5cc33ea2aaab419cb16120ebf7b0f240aa9c8a1f0a5adaf775ae55f92e9c864f37f1983523dd5378e83745983f82e9013d3cfa384549fc25365bf150cd25e3b7c9fe7a13933719c35b435ef19b9c829999967394a9c42868fb4546ccae0e05e3382dcb33d5c473854ee234087a8b7d33f1c82316f658665c409586355c6eb15c65d503bc3b1435a665db85370037e841ed3955a32cdb6db08e4c476fc90f52db17095d66430ec309c9abaf82eb6d37218411713a0a43e2c4bfc07ed70f1065edeaa4930f58dfc4f0f1e2d49f2f7b10c6f3f7b10e22500ecd8b1d0aac56293f47abe7db4d8a8a36794f7a2c6e76d00bf381fcedfdb996a7cb66bbd2dbb8c81913e9ea250558eb4aefb5de7ebe206dd0d15c8a8da0f0fa86e59ca77501b40aca0531fd09b6b3c96ae186351fd3330f12e24be0cfae0b1399ab6ba03cd975b9ee3e500b3901581cdcd5d65d59899fe6b288c95ad9964b34f5b0b37afc115785fa59187c6042c4d80cf0c11e8ba0b599777caea16fa3a9effb421ff6c3b329cdee43494852dd54082cb99d05de8e64f33eb8cd03f4a090964d8a36271b33e6c2edcd59c6c71c20188ac52960c4255688a7418c1bea4be23cdadbee1163dcdc9e7d4a46bee6df67f1e184dc743b1a3a007523770513ced1f5cde07f2ad60d89c82cd862ce1a2f470345295c36357f175575c66548fd"}, 0x76d)

22:32:27 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, 0x0)

22:32:27 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

22:32:27 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:27 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:27 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1157.924179][T12930] usb 5-1: new high-speed USB device number 99 using dummy_hcd
22:32:28 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1157.974282][T11807] usb 6-1: new high-speed USB device number 43 using dummy_hcd
22:32:28 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140), 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1158.164253][T12930] usb 5-1: Using ep0 maxpacket: 8
[ 1158.214231][T11807] usb 6-1: Using ep0 maxpacket: 8
22:32:28 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140), 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1158.284368][T12930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1158.284437][T12930] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1158.284479][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.286733][T12930] usb 5-1: config 0 descriptor??
[ 1158.334338][T11807] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1158.334388][T11807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.336619][T11807] usb 6-1: config 0 descriptor??
22:32:28 executing program 2:
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, &(0x7f00000000c0)={0x200, 0x84d})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0xffff, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000003e3ff000000000000ea04850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)

22:32:28 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140), 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1158.553127][T12930] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:32:28 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[ 1158.755786][T12930] usb 5-1: USB disconnect, device number 99
[ 1158.774831][T12930] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
22:32:28 executing program 1:
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
eventfd2(0x0, 0x0)

[ 1159.034211][T11807] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
22:32:29 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, 0x0)

[ 1159.534281][T11807] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1159.545192][T11807] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1159.555239][T11807] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1159.564607][ T5269] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1159.574600][T11807] usb 6-1: USB disconnect, device number 43
[ 1159.804148][ T5269] usb 5-1: Using ep0 maxpacket: 8
[ 1159.924427][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1159.939387][ T5269] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1159.949347][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.968061][ T5269] usb 5-1: config 0 descriptor??
22:32:30 executing program 1:
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
eventfd2(0x0, 0x0)

22:32:30 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:30 executing program 2:
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0x0, &(0x7f00000000c0)={0x200, 0x84d})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0xffff, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000003e3ff000000000000ea04850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285c4d007ecdfb"})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)

22:32:30 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:30 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:30 executing program 1:
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
eventfd2(0x0, 0x0)

22:32:30 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

22:32:30 executing program 1:
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
eventfd2(0x0, 0x0)

22:32:30 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 1160.226627][ T5269] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
22:32:30 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, 0x0, 0x0)

22:32:30 executing program 1:
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$FUSE_BMAP(r0, &(0x7f0000000000)={0x1}, 0x65dd9077033fd36a)
write$FUSE_STATFS(r0, 0x0, 0x0)

[ 1160.404240][T12930] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1160.429400][ T5269] usb 5-1: USB disconnect, device number 100
[ 1160.477941][ T5269] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1160.654253][T12930] usb 6-1: Using ep0 maxpacket: 8
[ 1160.774428][T12930] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1160.783821][T12930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1160.802883][T12930] usb 6-1: config 0 descriptor??
22:32:30 executing program 1:
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000000)={0x1}, 0x65dd9077033fd36a)
write$FUSE_STATFS(r0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)

22:32:30 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, 0x0, 0x0)

22:32:30 executing program 2:
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

22:32:31 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:31 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x80000001, 0xfffffffffffffff8}, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00')
fcntl$lock(r2, 0x0, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFADDR(r1, 0x5450, 0x0)

[ 1161.504283][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1161.994273][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1162.005860][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1162.015948][T12930] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1162.035873][T12930] usb 6-1: USB disconnect, device number 44
22:32:32 executing program 2:
pipe2(&(0x7f00000010c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000000)={0x1}, 0x65dd9077033fd36a)
write$FUSE_GETXATTR(r0, 0x0, 0x0)

22:32:32 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, 0x0, 0x0)

22:32:32 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000008d40))

22:32:32 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0), 0x8)

22:32:32 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140), 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:32 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:32 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x80, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)

22:32:32 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x400c6615, 0x0)

22:32:32 executing program 1:
syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2)

22:32:32 executing program 3:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x20)

22:32:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8)

22:32:32 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180))

[ 1162.894382][T12930] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1163.144338][T12930] usb 6-1: Using ep0 maxpacket: 8
[ 1163.264347][T12930] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1163.273959][T12930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.301870][T12930] usb 6-1: config 0 descriptor??
22:32:33 executing program 2:
keyctl$get_security(0x8, 0x0, 0x0, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "fab3becf574a72b64a84808ac3e6a50c1bb1fe066db533d429bf56b979508d9aba776a97da10d857084242c86ad29a42939a3929a4003a9bfd18ac502046d726"}, 0x48, 0xfffffffffffffffc)
request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000340)='syz', r0)
keyctl$invalidate(0x15, r0)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', r1)

22:32:33 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
read$dsp(r0, &(0x7f0000000100)=""/30, 0x1e)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045002, &(0x7f0000000140))

22:32:33 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x3)

22:32:33 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x400, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}})

22:32:33 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x55)

[ 1164.014472][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1164.514247][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1164.524958][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1164.535342][T12930] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1164.555096][T12930] usb 6-1: USB disconnect, device number 45
22:32:35 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x800003, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:32:35 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140), 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:35 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f0000000200))

22:32:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

22:32:35 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
read$dsp(r0, &(0x7f0000000100)=""/30, 0x1e)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045002, &(0x7f0000000140))

22:32:35 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0684608, 0x0)

22:32:35 executing program 2:
add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)

22:32:35 executing program 4:
r0 = add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="18", 0x1, 0xfffffffffffffffb)
keyctl$get_security(0x4, r0, 0x0, 0x0)

22:32:35 executing program 2:
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40040, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
chown(&(0x7f0000000000)='./file0\x00', 0x0, r0)

22:32:35 executing program 1:
r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x0)

22:32:35 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40040, 0x0)
rename(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00')

[ 1165.404182][T12930] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1165.674160][T12930] usb 6-1: Using ep0 maxpacket: 8
[ 1165.804400][T12930] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1165.813872][T12930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1165.834764][T12930] usb 6-1: config 0 descriptor??
[ 1166.534251][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1167.014478][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1167.028397][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1167.038336][T12930] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1167.051132][T12930] usb 6-1: USB disconnect, device number 46
22:32:37 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:37 executing program 2:
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil)

22:32:37 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44140, 0x40)

22:32:37 executing program 4:
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)

22:32:37 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
read$dsp(r0, &(0x7f0000000100)=""/30, 0x1e)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045002, &(0x7f0000000140))

22:32:37 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140), 0x6, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:37 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000003240)='./file0\x00', 0x4000, 0x20, &(0x7f0000003280))

22:32:37 executing program 2:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x400, 0x0)

22:32:37 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r0, &(0x7f0000011500)={0x0, 0x0, 0x0}, 0x80)

22:32:37 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101142, 0x22)

22:32:37 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40040, 0x0)
r0 = getuid()
chown(&(0x7f0000000040)='./file0\x00', r0, 0xee01)

22:32:37 executing program 2:
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40040, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x200, &(0x7f0000000240))

[ 1167.874223][T12930] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1168.182672][T12930] usb 6-1: Using ep0 maxpacket: 8
[ 1168.304392][T12930] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1168.313700][T12930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1168.336810][T12930] usb 6-1: config 0 descriptor??
[ 1169.014346][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1169.524321][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1169.536534][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1169.547097][T12930] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1169.566380][T12930] usb 6-1: USB disconnect, device number 47
22:32:40 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4})

22:32:40 executing program 1:
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

22:32:40 executing program 3:
getrusage(0x0, 0x0)
getrusage(0x0, &(0x7f00000000c0))

22:32:40 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000300)='-@%-)-@%)&\x00'}, 0x30)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r0, &(0x7f0000000180), 0x1a51a)

22:32:40 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:40 executing program 4:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff)

22:32:40 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x40187014)

22:32:40 executing program 1:
open(&(0x7f0000000140)='./bus\x00', 0x1eb142, 0x0)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lchown(&(0x7f0000000680)='./bus\x00', r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0)
fcntl$setlease(r2, 0x400, 0x0)

22:32:40 executing program 2:
mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)

22:32:40 executing program 4:
mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}})

22:32:40 executing program 3:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)

[ 1170.441041][T20082] fuseblk: Bad value for 'fd'
[ 1170.444571][ T5269] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1170.684340][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1170.804485][ T5269] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1170.813602][ T5269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1170.833420][ T5269] usb 6-1: config 0 descriptor??
[ 1171.525531][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1172.024254][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1172.035030][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1172.045614][ T5269] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1172.063501][ T5269] usb 6-1: USB disconnect, device number 48
22:32:42 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:42 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x1})

22:32:42 executing program 2:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

22:32:42 executing program 3:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000040))

22:32:42 executing program 4:
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

22:32:42 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:42 executing program 3:
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8de2615a79b2ddc4)

22:32:42 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt(r0, 0xffff, 0x1, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000)

22:32:42 executing program 4:
setitimer(0x2, &(0x7f0000000100)={{0x10001}, {0x0, 0xc}}, &(0x7f0000000140))

22:32:42 executing program 1:
mlock(&(0x7f0000fe9000/0x14000)=nil, 0x14000)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)

22:32:42 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000000)='$', 0x1, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10)

22:32:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x61)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "198527f76b3e2e8f", "47176081ca620400", "0158fde7", "db55310484aa2aae"}, 0x28)

[ 1172.934245][ T5274] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1173.184085][ T5274] usb 6-1: Using ep0 maxpacket: 8
[ 1173.304323][ T5274] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1173.313712][ T5274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.332968][ T5274] usb 6-1: config 0 descriptor??
[ 1174.034456][ T5274] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1174.534420][ T5274] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1174.545592][ T5274] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1174.557417][ T5274] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1174.568470][ T5274] usb 6-1: USB disconnect, device number 49
22:32:45 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:45 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@sndrcv={0x2c}], 0x2c}, 0x0)

22:32:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800010007"], 0x6c}}, 0x0)

22:32:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x208e24b)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0x4040ae9e, &(0x7f0000001600)={{0x0, 0x0, 0x80}})

22:32:45 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x0)
close(r0)

22:32:45 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:45 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c)

22:32:45 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="13", 0x1}], 0x1}, 0x0)

22:32:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$nci(r0, 0x0, 0x0)

22:32:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0xc018aec0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

22:32:45 executing program 3:
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)

22:32:45 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)={0x10}, 0x10}], 0x1}, 0x0)

[ 1175.394546][ T5274] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1175.664202][ T5274] usb 6-1: Using ep0 maxpacket: 8
[ 1175.784535][ T5274] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1175.793768][ T5274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.812380][ T5274] usb 6-1: config 0 descriptor??
[ 1176.494434][ T5274] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1176.984260][ T5274] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1176.995073][ T5274] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1177.005263][ T5274] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1177.015400][ T5274] usb 6-1: USB disconnect, device number 50
22:32:47 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064b8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})

22:32:47 executing program 3:
r0 = openat$uinput(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

22:32:47 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x541e, 0x0)

22:32:47 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:47 executing program 2:
keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={'sha224-avx2\x00'}})

22:32:47 executing program 1:
syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x26402)

22:32:47 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000800), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, "0d1562115943db1da47980452c72212eb448ca129674078a58ed15dc93c464be551a6c520e11df494e4c4b2b8cdc472c29762f947d50fdea62ee7b26abbf99dc", "7b6aed5bc7ab74f1f57dfad1760d5ac84fc3582151864856a906a0fd6e068983a5748f92028ad25ead6c0a8388dc760c9a31f845144c901f51a1c9a6fc37e96a", "915c5dff5b60a232163d6e5ec66bb2fbb938159b482f284cbcdbd48067468c00"}})

22:32:47 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000800), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000001c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x82, 0x0, 0x0, 0xb, 0x1c, "ad51bed92cef25a4ac9fca80804664588d174b5dbdfdf9b7e7fa7dc816c05d461d09bd042c2ba7e7bc91f8e09aca9f32cb44a9aa1f270ca55e0b6d6791ca8570", "ec72938c481200439a034d8247ef21fe978cf79bdeafe0161bb03e1675ad9d5de635b1c95b22874dc37d31878da12fddf8a7b14c1c55be67d109ab35e5f88639", "352c954f959a9842f525030078147dd1a6f768ca8167bdae527da207e46ac084", [0x0, 0x9]}})

22:32:47 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0xc0401273, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cbd6f897b2e0f0f815fdea3deeaf16f3ee1fed9c3220644dfa9e4682bcfd9312b60e35f6bc8800d0fd7f4281e2f7089490882e965cc22831ca79d32b51221a58", "07b4cfa5546e2450704d6bb1b5ce0fd15bbcd12616a5ad856305d3221e763efd9ba8846342b1c220316f808704270023b9b80dbffed568ad90d09b65f48e28d9", "bdb5ff850c5ec064065457d0b51c7e80357d598fc6dc6301e59ee222ae5a4fcb"}})

22:32:47 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x541d, 0x0)

22:32:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x4b3b, &(0x7f0000000040))

[ 1177.844545][ T5269] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1178.094112][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1178.214376][ T5269] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1178.223735][ T5269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1178.242637][ T5269] usb 6-1: config 0 descriptor??
[ 1178.944393][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1179.434233][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1179.445125][ T5269] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1179.455608][ T5269] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1179.465547][ T5269] usb 6-1: USB disconnect, device number 51
22:32:49 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:49 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000800), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, "0d1562115943db1da47980452c72212eb448ca129674078a58ed15dc93c464be551a6c520e11df494e4c4b2b8cdc472c29762f947d50fdea62ee7b26abbf99dc", "7b6aed5bc7ab74f1f57dfad1760d5ac84fc3582151864856a906a0fd6e068983a5748f92028ad25ead6c0a8388dc760c9a31f845144c901f51a1c9a6fc37e96a", "915c5dff5b60a232163d6e5ec66bb2fbb938159b482f284cbcdbd48067468c00"}})

22:32:49 executing program 1:
syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x26402)

22:32:49 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x80045432, &(0x7f0000000040))

22:32:49 executing program 4:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r0, 0x106, 0x0, 0x0, 0x0)

22:32:49 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

22:32:50 executing program 4:
openat$sysctl(0xffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)

22:32:50 executing program 2:
openat$proc_mixer(0xffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0)

22:32:50 executing program 3:
keyctl$dh_compute(0x17, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={'blake2b-512-generic\x00'}})

22:32:50 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x4b49, &(0x7f0000000040))

22:32:50 executing program 2:
openat$proc_mixer(0xffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x4400, 0x0)

22:32:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x0, 0x0, 0x0})

[ 1180.354354][T12930] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1180.604139][T12930] usb 6-1: Using ep0 maxpacket: 8
[ 1180.724225][T12930] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1180.733822][T12930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1180.745331][T12930] usb 6-1: config 0 descriptor??
[ 1181.444325][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1181.934197][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1181.944852][T12930] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1181.956893][T12930] CoreChips: probe of 6-1:0.0 failed with error -71
[ 1181.967239][T12930] usb 6-1: USB disconnect, device number 52
22:32:52 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r1, 0x501, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0)

22:32:52 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x1278, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cbd6f897b2e0f0f815fdea3deeaf16f3ee1fed9c3220644dfa9e4682bcfd9312b60e35f6bc8800d0fd7f4281e2f7089490882e965cc22831ca79d32b51221a58", "07b4cfa5546e2450704d6bb1b5ce0fd15bbcd12616a5ad856305d3221e763efd9ba8846342b1c220316f808704270023b9b80dbffed568ad90d09b65f48e28d9", "bdb5ff850c5ec064065457d0b51c7e80357d598fc6dc6301e59ee222ae5a4fcb"}})

22:32:52 executing program 2:
rt_sigtimedwait(&(0x7f00000002c0), 0x0, &(0x7f00000003c0), 0x8)

22:32:52 executing program 4:
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x74}, 0x20)

22:32:52 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[ 1182.455970][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.463085][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
22:32:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1})

22:32:52 executing program 3:
r0 = openat$ipvs(0xffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
read$proc_mixer(r0, &(0x7f00000008c0)=""/225, 0xe1)

22:32:52 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x0, 0x0, "fc3ee9bd4e0d68e4f3b6cd6fd4b9b810528b06f1d02ed87531fce8dc542ac7c8d45f20db06bf3db094265e15bfbdf1c3566a9f86379810c664a2c056bcf9d90c7536fa0c6b0f92cb502e66d07d9783bf"}, 0xd8)

22:32:52 executing program 1:
r0 = openat$sysctl(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
write$sysctl(r0, 0x0, 0x0)

22:32:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x5609, &(0x7f0000000040))

22:32:52 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0)

[ 1182.854424][T12930] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1183.094615][T12930] usb 6-1: Using ep0 maxpacket: 8
[ 1183.214223][T12930] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1183.223434][T12930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1183.235976][T12930] usb 6-1: config 0 descriptor??
[ 1183.714331][T12930] CoreChips: probe of 6-1:0.0 failed with error -32
22:32:55 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x5460, 0x0)

22:32:55 executing program 1:
syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x5609, &(0x7f0000000040))

22:32:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x5606, 0x0)

22:32:55 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x18}, 0x48)

22:32:55 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0)

[ 1185.571792][ T5269] usb 6-1: USB disconnect, device number 53
22:32:55 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x4b63, 0x0)

22:32:55 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x4b32, &(0x7f0000000040))

22:32:55 executing program 4:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080))

22:32:55 executing program 2:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/uts\x00')
setns(r0, 0x40000000)

22:32:55 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x40}}, 0x0)

22:32:55 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$can_bcm(r0, &(0x7f0000000180), 0x10)

[ 1186.134235][ T5269] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1186.414252][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1186.554924][ T5269] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1186.579694][ T5269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.597061][ T5269] usb 6-1: config 0 descriptor??
[ 1187.074239][ T5269] CoreChips: probe of 6-1:0.0 failed with error -32
22:32:58 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:32:58 executing program 2:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

22:32:58 executing program 1:
socket(0xa, 0x3, 0x3a)
getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)

22:32:58 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x700, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x6e4, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x1d0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "462eb44fb8e3c535592ac8c01f7f08e64e5d153925e1cc1959ed1bc7c6367aaa"}, @WGPEER_A_ALLOWEDIPS={0x15c, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}]}, {0x1a4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_ALLOWEDIPS={0x128, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "033f537cf493eefb87c9b9061ad0936fb255b0a1826fce6a9984a846095887ab"}]}, {0x23c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x238, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}]}]}]}, 0x700}}, 0x0)

22:32:58 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

22:32:58 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0)

[ 1188.704237][ T5274] usb 6-1: USB disconnect, device number 54
22:32:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x38, 0x9, 0x0, 0x0, {0x1, 0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\b\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}}, 0x0)

22:32:58 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x3, 0x0)
write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0'}, 0xfdef)
read(r2, &(0x7f0000000040)=""/17, 0xfdef)
read(r2, &(0x7f00000000c0)=""/14, 0xe)
write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x3f0)

22:32:58 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3f3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, [0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401, 0x0, 0x8, 0x10000, 0x2, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xfa, 0x2, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x420}}, 0x0)

22:32:58 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3f3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, [0x0, 0x7fffffff, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x401, 0x0, 0x8, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x420}}, 0x0)

22:32:58 executing program 4:
syz_emit_ethernet(0x3b6, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000400"}, {0x1, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8af7dd60a9d33e2b1e26eb1d18065daa76ff1e9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

22:32:59 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000200)=@raw=[@call, @ldst={0x0, 0x0, 0x2}, @func, @map_fd], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 1189.028414][T20268] : entered promiscuous mode
[ 1189.194284][ T5274] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1189.454158][ T5274] usb 6-1: Using ep0 maxpacket: 8
[ 1189.574388][ T5274] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1189.583547][ T5274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1189.603129][ T5274] usb 6-1: config 0 descriptor??
[ 1190.084318][ T5274] CoreChips: probe of 6-1:0.0 failed with error -32
22:33:01 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:33:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x38, 0x9, 0x0, 0x0, {0x1, 0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\b\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}}, 0x0)

22:33:01 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:01 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="6f0a00eaff10", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xe0000002, @local={0xac, 0x70}}}}}}}, 0x0)

22:33:01 executing program 3:
mknod(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0)
open$dir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0)
acct(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

22:33:01 executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0)

[ 1191.835813][T12930] usb 6-1: USB disconnect, device number 55
22:33:01 executing program 2:
symlink(&(0x7f00000052c0)='./bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000140)='./bus\x00')

22:33:02 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004b80)='/sys/devices/virtual', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200)

22:33:02 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000c00)={0x2c, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0xa, @string={0xa, 0x3, "745317e79f49b2c1"}}, 0x0, 0x0, 0x0}, 0x0)

22:33:02 executing program 2:
socketpair(0x0, 0x8080d, 0x0, &(0x7f0000000000))

22:33:02 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x90f, 0x81, 0xbbda, 0xffffffff, 0x7, 0xff, 0x0, 0x7f})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

22:33:02 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="7fd572a4a17600000000000008060001080006"], 0x0)

[ 1192.213453][ T5269] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1192.304150][T12930] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1192.368103][ T5274] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1192.474139][ T5269] usb 5-1: Using ep0 maxpacket: 32
[ 1192.574365][T12930] usb 6-1: Using ep0 maxpacket: 8
[ 1192.604277][ T5269] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1192.612758][ T5269] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1192.621537][ T5269] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1192.631188][ T5269] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1192.641784][ T5269] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1192.651990][ T5269] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1192.669393][ T5269] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1192.683059][ T5269] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1192.692649][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1192.714997][T12930] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1192.725330][T12930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1192.734666][ T5274] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1192.743143][ T5269] usb 5-1: config 0 descriptor??
[ 1192.777217][T12930] usb 6-1: config 0 descriptor??
[ 1192.914394][ T5274] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1192.930431][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1192.953768][ T5274] usb 4-1: Product: syz
[ 1192.962849][ T5274] usb 4-1: Manufacturer: syz
[ 1192.972188][ T5274] usb 4-1: SerialNumber: syz
[ 1193.007795][ T5269] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 101 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1193.060066][ T5269] usb 5-1: USB disconnect, device number 101
[ 1193.109190][ T5269] usblp0: removed
[ 1193.254568][T12930] CoreChips: probe of 6-1:0.0 failed with error -32
[ 1193.584170][ T5269] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1193.824124][ T5269] usb 5-1: Using ep0 maxpacket: 32
[ 1193.964388][ T5269] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1193.976516][ T5269] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1194.007050][ T5269] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1194.024577][ T5269] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1194.036116][ T5269] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1194.046494][ T5269] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1194.066798][ T5269] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1194.073597][ T5269] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1194.093907][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1194.108601][ T5269] usb 5-1: config 0 descriptor??
[ 1194.124288][ T5274] cdc_ncm 4-1:1.0: failed to get mac address
[ 1194.344214][ T5274] cdc_ncm 4-1:1.0: bind() failure
[ 1194.384190][ T5274] cdc_ncm: probe of 4-1:1.1 failed with error -71
[ 1194.404223][ T5274] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1194.424292][ T5274] usbtest: probe of 4-1:1.1 failed with error -71
[ 1194.444241][ T5274] usb 4-1: USB disconnect, device number 26
[ 1194.727989][ T5269] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 102 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:04 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:33:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$tun(r1, &(0x7f0000000480)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a0730f", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private2, @private2}}}}}}, 0x62)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_IO(r2, 0x2285, 0x0)

[ 1194.945641][ T5274] usb 6-1: USB disconnect, device number 56
[ 1195.404140][ T5274] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1195.644168][ T5274] usb 6-1: Using ep0 maxpacket: 8
[ 1195.764221][ T5274] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1195.774111][ T5274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.792405][ T5274] usb 6-1: config 0 descriptor??
22:33:06 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:06 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000880)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:33:06 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000c00)={0x2c, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0xa, @string={0xa, 0x3, "745317e79f49b2c1"}}, 0x0, 0x0, 0x0}, 0x0)

22:33:06 executing program 0:
r0 = io_uring_setup(0x39a5, &(0x7f0000000000))
r1 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0)
r2 = dup(r1)
write$cgroup_pid(r2, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
sendfile(r1, r2, &(0x7f0000000100), 0x6c03)
close_range(r0, 0xffffffffffffffff, 0x0)

22:33:06 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=@raw=[@jmp, @cb_func], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 1196.142233][ T5269] usb 5-1: USB disconnect, device number 102
22:33:06 executing program 2:
syz_clone(0x50190000, 0x0, 0x0, 0x0, 0x0, 0x0)

22:33:06 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000200)='net/nfsfs\x00')

[ 1196.239970][ T5269] usblp0: removed
[ 1196.275204][ T5274] CoreChips: probe of 6-1:0.0 failed with error -32
22:33:06 executing program 0:
r0 = io_uring_setup(0x39a5, &(0x7f0000000000))
r1 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0)
r2 = dup(r1)
write$cgroup_pid(r2, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
sendfile(r1, r2, &(0x7f0000000100), 0x6c03)
close_range(r0, 0xffffffffffffffff, 0x0)

22:33:06 executing program 2:
recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x0)

22:33:06 executing program 1:
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_clone(0x8008000, &(0x7f0000000040)="5f1790cf0f714762bba84f61eaff6a882f04c40c5d7196b0cf447f6c7a18b26f1c9347db92be3a46f8aed23451eea09f3113945da30da323407092e75d52988b626c3b48f341a4a486ccd44c9b353be5b4b00e9716b538335e57f38e3880cafd7e9989374428a3e51ac08f3214269c4394ddbfebc0b0f1f49efebd99664267dbf368d668c9221b868e68ffd31a738cfe3db473d4e65c057a39f970cd026457561c9b386f46cf671385b44176b73da74f7bb588d6a18e28892d6028bff65696b08f342b3401b63bc59c", 0xc9, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))

[ 1196.524203][T12930] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1196.634123][ T5269] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1196.904359][ T5269] usb 5-1: Using ep0 maxpacket: 32
[ 1196.924506][T12930] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1197.024215][ T5269] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1197.032639][ T5269] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1197.041078][ T5269] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1197.050597][ T5269] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1197.060779][ T5269] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1197.070744][ T5269] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1197.084654][ T5269] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1197.091428][ T5269] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1197.110550][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1197.122494][ T5269] usb 5-1: config 0 descriptor??
[ 1197.127972][T12930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1197.137361][T12930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.145585][T12930] usb 4-1: Product: syz
[ 1197.149787][T12930] usb 4-1: Manufacturer: syz
[ 1197.155498][T12930] usb 4-1: SerialNumber: syz
[ 1197.407149][ T5269] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1197.423368][ T5269] usb 5-1: USB disconnect, device number 103
[ 1197.450751][ T5269] usblp0: removed
22:33:08 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:33:08 executing program 2:
select(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140))

[ 1198.004236][ T5269] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1198.034350][  T918] usb 6-1: USB disconnect, device number 57
[ 1198.274127][ T5269] usb 5-1: Using ep0 maxpacket: 32
[ 1198.324304][T12930] cdc_ncm 4-1:1.0: failed to get mac address
[ 1198.404310][ T5269] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1198.412761][ T5269] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1198.421297][ T5269] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1198.430587][ T5269] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1198.441625][ T5269] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1198.451902][ T5269] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1198.464367][  T918] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1198.466339][ T5269] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1198.479672][ T5269] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1198.491498][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.502088][ T5269] usb 5-1: config 0 descriptor??
[ 1198.544339][T12930] cdc_ncm 4-1:1.0: bind() failure
[ 1198.564391][T12930] cdc_ncm: probe of 4-1:1.1 failed with error -71
[ 1198.584399][T12930] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1198.604233][T12930] usbtest: probe of 4-1:1.1 failed with error -71
[ 1198.622954][T12930] usb 4-1: USB disconnect, device number 27
[ 1198.722193][  T918] usb 6-1: Using ep0 maxpacket: 8
[ 1198.844246][  T918] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1198.857916][  T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.871985][  T918] usb 6-1: config 0 descriptor??
[ 1199.118231][ T5269] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1199.355049][  T918] CoreChips: probe of 6-1:0.0 failed with error -32
22:33:10 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:10 executing program 1:
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_clone(0x8008000, &(0x7f0000000040)="5f1790cf0f714762bba84f61eaff6a882f04c40c5d7196b0cf447f6c7a18b26f1c9347db92be3a46f8aed23451eea09f3113945da30da323407092e75d52988b626c3b48f341a4a486ccd44c9b353be5b4b00e9716b538335e57f38e3880cafd7e9989374428a3e51ac08f3214269c4394ddbfebc0b0f1f49efebd99664267dbf368d668c9221b868e68ffd31a738cfe3db473d4e65c057a39f970cd026457561c9b386f46cf671385b44176b73da74f7bb588d6a18e28892d6028bff65696b08f342b3401b63bc59c", 0xc9, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))

22:33:10 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xc141)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0)

22:33:10 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x8804)
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='@)%&/)\'!\x00')
syz_clone(0x8008000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))

22:33:10 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000c00)={0x2c, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0xa, @string={0xa, 0x3, "745317e79f49b2c1"}}, 0x0, 0x0, 0x0}, 0x0)

[ 1200.542418][T12930] usb 5-1: USB disconnect, device number 104
[ 1200.624327][T12930] usblp0: removed
22:33:10 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:33:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200))

22:33:10 executing program 2:
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)

22:33:10 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x50, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a4}]}, 0x50}}, 0x0)

22:33:10 executing program 1:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040))

[ 1200.894605][  T918] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1201.054174][T12930] usb 5-1: new high-speed USB device number 105 using dummy_hcd
22:33:11 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

22:33:11 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ac796eac039138ccfeda36308a212ec3f558978d5abb0ebb01", 0x19}], 0x1}}], 0x1, 0x0)
recvmmsg$unix(r0, &(0x7f0000000040), 0x2c, 0x0, 0x0)

[ 1201.116253][ T9675] usb 6-1: USB disconnect, device number 58
[ 1201.274280][  T918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1201.304320][T12930] usb 5-1: Using ep0 maxpacket: 32
[ 1201.424505][T12930] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1201.436432][T12930] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1201.456144][T12930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1201.474281][  T918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1201.477705][T12930] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1201.483397][  T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1201.483436][  T918] usb 4-1: Product: syz
[ 1201.483463][  T918] usb 4-1: Manufacturer: syz
[ 1201.483490][  T918] usb 4-1: SerialNumber: syz
[ 1201.523165][T12930] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1201.537001][T12930] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1201.550902][T12930] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1201.558420][T12930] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1201.568241][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1201.589171][T12930] usb 5-1: config 0 descriptor??
[ 1201.856131][T12930] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 105 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1201.875081][T12930] usb 5-1: USB disconnect, device number 105
[ 1201.896973][T12930] usblp0: removed
[ 1202.454377][T12930] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1202.604276][  T918] cdc_ncm 4-1:1.0: failed to get mac address
[ 1202.714224][T12930] usb 5-1: Using ep0 maxpacket: 32
[ 1202.824289][  T918] cdc_ncm 4-1:1.0: bind() failure
[ 1202.844394][T12930] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1202.845122][  T918] cdc_ncm: probe of 4-1:1.1 failed with error -71
[ 1202.852870][T12930] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1202.852914][T12930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1202.874270][  T918] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1202.879482][T12930] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1202.893283][T12930] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1202.903453][T12930] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1202.904372][  T918] usbtest: probe of 4-1:1.1 failed with error -71
[ 1202.917194][T12930] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1202.930227][T12930] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1202.948287][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.960225][  T918] usb 4-1: USB disconnect, device number 28
[ 1202.983399][T12930] usb 5-1: config 0 descriptor??
[ 1203.606624][T12930] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 106 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:15 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:15 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
ptrace(0x10, r0)
prlimit64(r0, 0x0, &(0x7f0000000080), 0x0)
getpid()
waitid(0x0, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

22:33:15 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$FUSE_OPEN(r1, &(0x7f00000020c0)={0x20}, 0x20)
recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)=""/249, 0xf9}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}, 0x0)

22:33:15 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

22:33:15 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffff7f00000000b2ae937700000000faffffffffff"])
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000001c0)=""/153, 0x99}], 0x2}, 0x0)
recvmmsg$unix(r0, &(0x7f0000000040), 0x2c, 0x0, 0x0)

22:33:15 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000c00)={0x2c, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0xa, @string={0xa, 0x3, "745317e79f49b2c1"}}, 0x0, 0x0, 0x0}, 0x0)

[ 1205.041166][  T918] usb 5-1: USB disconnect, device number 106
22:33:15 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000040)="e1", 0x1, 0x0, 0x0, 0x0)
write$FUSE_OPEN(r0, &(0x7f00000020c0)={0x20}, 0x20)

[ 1205.138781][  T918] usblp0: removed
22:33:15 executing program 1:
timer_getoverrun(0x0)
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0)
timer_create(0x1, &(0x7f0000001080)={0x0, 0xb, 0x2, @thr={&(0x7f0000000000), 0x0}}, &(0x7f00000010c0)=<r0=>0x0)
timer_getoverrun(r0)
socket$bt_hidp(0x1f, 0x3, 0x6)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000)
shmdt(0x0)
timer_delete(0x0)
shutdown(0xffffffffffffffff, 0x0)

22:33:15 executing program 0:
timer_create(0x0, 0x0, &(0x7f00000010c0))
timer_getoverrun(0x0)

22:33:15 executing program 0:
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000208d21209000000000008000000d180010000000000200000", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x51, &(0x7f0000000140)={@dev, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x6}}, {@llc_tr={0x11, {@snap={0xaa, 0x0, "1c", '\x00', 0x80f3, "9d1f7172bdc9c66d0116dc1f783256e909130e296fc6eca6667ff861671bd7080582439c13c28f954abe670b099259b0a010952b7e122b"}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:33:15 executing program 1:
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000)
memfd_create(&(0x7f0000001100)='%]\x00', 0x0)
r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000)
shmdt(r0)

22:33:15 executing program 1:
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000380)=0x4000)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086607, &(0x7f0000000680))
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0)

[ 1205.404615][T12930] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1205.574548][  T918] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1205.764330][T12930] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1205.844189][  T918] usb 5-1: Using ep0 maxpacket: 32
[ 1205.934915][T12930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1205.944568][T12930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.952802][T12930] usb 4-1: Product: syz
[ 1205.957261][T12930] usb 4-1: Manufacturer: syz
[ 1205.972046][T12930] usb 4-1: SerialNumber: syz
[ 1205.985627][  T918] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1205.994486][  T918] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1206.002776][  T918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1206.014879][  T918] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1206.025127][  T918] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1206.035180][  T918] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1206.048476][  T918] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1206.055224][  T918] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1206.064434][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1206.074869][  T918] usb 5-1: config 0 descriptor??
[ 1206.339994][  T918] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 107 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1206.354855][  T918] usb 5-1: USB disconnect, device number 107
[ 1206.377452][  T918] usblp0: removed
[ 1206.914168][  T918] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1207.114257][T12930] cdc_ncm 4-1:1.0: failed to get mac address
[ 1207.164230][  T918] usb 5-1: Using ep0 maxpacket: 32
[ 1207.304293][  T918] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1207.312670][  T918] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1207.321046][  T918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1207.331539][  T918] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1207.344414][T12930] cdc_ncm 4-1:1.0: bind() failure
[ 1207.345674][  T918] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1207.359431][  T918] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1207.372799][  T918] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1207.374349][T12930] cdc_ncm: probe of 4-1:1.1 failed with error -71
[ 1207.379504][  T918] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1207.379546][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.390223][  T918] usb 5-1: config 0 descriptor??
[ 1207.434356][T12930] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1207.464310][T12930] usbtest: probe of 4-1:1.1 failed with error -71
[ 1207.476062][T12930] usb 4-1: USB disconnect, device number 29
[ 1208.007593][  T918] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 108 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:19 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(r0)

22:33:19 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

22:33:19 executing program 1:
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000)
timer_create(0x0, 0x0, &(0x7f00000010c0))
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000)

22:33:19 executing program 0:
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000208d21209000000000008000000d180010000000000200000", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x51, &(0x7f0000000140)={@dev, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x6}}, {@llc_tr={0x11, {@snap={0xaa, 0x0, "1c", '\x00', 0x80f3, "9d1f7172bdc9c66d0116dc1f783256e909130e296fc6eca6667ff861671bd7080582439c13c28f954abe670b099259b0a010952b7e122b"}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:33:19 executing program 2:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40106614, &(0x7f0000000680))

22:33:19 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000880))

[ 1209.451572][ T5269] usb 5-1: USB disconnect, device number 108
[ 1209.478530][ T5269] usblp0: removed
22:33:19 executing program 2:
syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000009c0)={@empty}, 0x14)
socket(0x0, 0x800, 0x101)

22:33:19 executing program 1:
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x3a, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

22:33:19 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x2c, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

22:33:19 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="bf8e09de507d21c9ff099c12ec13", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

22:33:19 executing program 3:
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200))

22:33:19 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0)

[ 1210.034131][ T5269] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1210.274094][ T5269] usb 5-1: Using ep0 maxpacket: 32
[ 1210.394306][ T5269] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1210.402739][ T5269] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1210.414682][ T5269] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1210.424360][ T5269] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1210.434290][ T5269] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1210.444243][ T5269] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1210.457575][ T5269] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1210.464331][ T5269] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1210.473415][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1210.484683][ T5269] usb 5-1: config 0 descriptor??
[ 1210.737846][ T5269] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 109 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1210.753484][ T5269] usb 5-1: USB disconnect, device number 109
[ 1210.774468][ T5269] usblp0: removed
[ 1211.294224][ T5269] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1211.534081][ T5269] usb 5-1: Using ep0 maxpacket: 32
[ 1211.660072][ T5269] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1211.668616][ T5269] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1211.676877][ T5269] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1211.685946][ T5269] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1211.695951][ T5269] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1211.705955][ T5269] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1211.719286][ T5269] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1211.727598][ T5269] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1211.737693][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.754434][ T5269] usb 5-1: config 0 descriptor??
[ 1212.378500][ T5269] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 110 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:23 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(r0)

22:33:23 executing program 3:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xffffe, 0x1, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0, 0x0, 0x1000000000000}, 0x38)

22:33:23 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r1, &(0x7f0000000000), 0x248800)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)

22:33:23 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x9}, 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x20000000}, 0x20)

22:33:23 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x5, 0x8, 0x9}, 0x48)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x20000000}, 0x20)

22:33:23 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1213.759641][ T9675] usb 5-1: USB disconnect, device number 110
[ 1213.836157][ T9675] usblp0: removed
22:33:23 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
syz_clone(0x40000000, &(0x7f00000002c0)="8b", 0x1, 0x0, &(0x7f0000000180), &(0x7f00000001c0))

22:33:23 executing program 2:
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7)
r0 = dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4}]}, 0xc0}}, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESDEC], 0xffffffffffffffec)
r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0)
getdents64(r2, &(0x7f0000fc4fbe)=""/80, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa4)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="021407062300000028bd7000fcdbdf2502001000000004d2000004d4000000001a00180032c17909c1e4bd10b35fde653262cf3ca885b429e16ab49b81ee27ce991f8d63b93ee4793943941fbddc8c1516c2a30382f3242becae63db9fe7051e3240d52a2090a603b37fe0cacb2688ba51a294ad6ae878953c9d6778405c2d0c2356c14b823621189a9abd1fe63d7da696e77136e67a9212991a4e5cf190e767e54a4f1536c6250fb7f46a2129f6736cb0555715a9652dcb953bb5e7e0e1c99bb91b8a77c74eedbe025f4bae1eb32018a462dc8aae1733efdf1e35791b342a4ebb585d100d23524288df3a46d0757100050019000000000002004e2064010102000000000000000002004e22e00000020000000000000000897534d7a1600692bbd578c8d6f29836d214200950aae0f7a571376007cbb62ecbc748d1d229f0bab9e0f53345307f1402691c0100fdf7473bb5d5bff1"], 0x118}}, 0x24044981)
unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200)
utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0xea60}, {0x77359400}}, 0x100)

22:33:23 executing program 0:
r0 = fanotify_init(0x200, 0x0)
r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r2 = dup(r1)
fanotify_mark(r0, 0x1, 0x4800105a, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000012c0)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020)

22:33:24 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c92012000e"], 0x17)

22:33:24 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)

22:33:24 executing program 3:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)

[ 1214.264405][ T9675] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1214.504345][ T9675] usb 5-1: Using ep0 maxpacket: 32
[ 1214.624318][ T9675] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1214.636493][ T9675] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1214.653467][ T9675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1214.675792][ T9675] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1214.686337][ T9675] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1214.696873][ T9675] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1214.710524][ T9675] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1214.719240][ T9675] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1214.732353][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1214.752698][ T9675] usb 5-1: config 0 descriptor??
[ 1215.016630][ T9675] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1215.038285][ T9675] usb 5-1: USB disconnect, device number 111
[ 1215.064334][ T9675] usblp0: removed
[ 1215.574218][ T9675] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1215.814271][ T9675] usb 5-1: Using ep0 maxpacket: 32
[ 1215.934176][ T9675] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1215.943413][ T9675] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1215.964073][ T9675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1215.973032][ T9675] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1215.983877][ T9675] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1215.996419][ T9675] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1216.010592][ T9675] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1216.018185][ T9675] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1216.027984][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1216.038595][ T9675] usb 5-1: config 0 descriptor??
[ 1216.637258][ T9675] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:28 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(r0)

22:33:28 executing program 0:
syz_clone(0xa9024080, 0x0, 0x0, 0x0, 0x0, 0x0)

22:33:28 executing program 2:
syz_clone(0xc0800200, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)

22:33:28 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:33:28 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00')

22:33:28 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
syz_clone(0x40000000, &(0x7f00000002c0)="8b", 0x1, 0x0, &(0x7f0000000180), &(0x7f00000001c0))

[ 1218.053391][ T9675] usb 5-1: USB disconnect, device number 112
22:33:28 executing program 3:
socketpair(0x2, 0x1, 0x20, &(0x7f0000000000))

[ 1218.159907][ T9675] usblp0: removed
22:33:28 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
close(r0)

22:33:28 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x300}, 0x0)

22:33:28 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2}]}}, &(0x7f0000000100)=""/140, 0x32, 0x8c, 0x1}, 0x20)

22:33:28 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000100)=""/140, 0x34, 0x8c, 0x1}, 0x20)

22:33:28 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
syz_clone(0x40000000, &(0x7f00000002c0)="8b", 0x1, 0x0, &(0x7f0000000180), &(0x7f00000001c0))

[ 1218.564393][ T9675] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1218.804229][ T9675] usb 5-1: Using ep0 maxpacket: 32
[ 1218.926959][ T9675] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1218.946455][ T9675] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1218.967401][ T9675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1218.991947][ T9675] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1219.020875][ T9675] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1219.054141][ T9675] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1219.089178][ T9675] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1219.101551][ T9675] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1219.144238][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.175152][ T9675] usb 5-1: config 0 descriptor??
[ 1219.453865][ T9675] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1219.486506][ T9675] usb 5-1: USB disconnect, device number 113
[ 1219.538866][ T9675] usblp0: removed
[ 1219.999497][ T9675] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1220.254080][ T9675] usb 5-1: Using ep0 maxpacket: 32
[ 1220.374338][ T9675] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1220.382763][ T9675] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1220.403819][ T9675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1220.422042][ T9675] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1220.443287][ T9675] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1220.469118][ T9675] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1220.493231][ T9675] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1220.500328][ T9675] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1220.516317][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1220.537865][ T9675] usb 5-1: config 0 descriptor??
[ 1221.136530][ T9675] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:32 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:32 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:33:32 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

22:33:32 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)

22:33:32 executing program 2:
bpf$PROG_LOAD(0xa, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)

22:33:32 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
syz_clone(0x40000000, &(0x7f00000002c0)="8b", 0x1, 0x0, &(0x7f0000000180), &(0x7f00000001c0))

[ 1222.548406][T12930] usb 5-1: USB disconnect, device number 114
[ 1222.644288][T12930] usblp0: removed
22:33:32 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)

22:33:32 executing program 2:
open$dir(&(0x7f0000000200)='./file0\x00', 0x10a40, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)

22:33:32 executing program 3:
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

22:33:32 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10)
r1 = dup(r0)
r2 = dup(r1)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x101, &(0x7f0000000180), &(0x7f0000000240)=0x98)

22:33:32 executing program 0:
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c)
r2 = dup2(r1, r0)
connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000200), 0xb)

22:33:32 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

[ 1223.084291][T12930] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1223.354075][T12930] usb 5-1: Using ep0 maxpacket: 32
[ 1223.504530][T12930] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1223.513323][T12930] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1223.523245][T12930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1223.543249][T12930] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1223.557866][T12930] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1223.574692][T12930] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1223.588428][T12930] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1223.595460][T12930] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1223.605210][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.624664][T12930] usb 5-1: config 0 descriptor??
[ 1223.896645][T12930] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 115 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1223.920821][T12930] usb 5-1: USB disconnect, device number 115
[ 1223.944671][T12930] usblp0: removed
[ 1224.474097][T12930] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1224.744089][T12930] usb 5-1: Using ep0 maxpacket: 32
[ 1224.884239][T12930] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1224.896299][T12930] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1224.928530][T12930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1224.947863][T12930] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1224.983009][T12930] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1225.003863][T12930] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1225.020417][T12930] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1225.027515][T12930] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1225.037042][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1225.048389][T12930] usb 5-1: config 0 descriptor??
[ 1225.667369][T12930] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 116 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:36 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r2, @ANYBLOB="0b00000000000000140012800b000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xac0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x0)

22:33:36 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f00000004c0), &(0x7f0000000580)=0x88)

22:33:36 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:33:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0)

22:33:36 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1226.870870][ T9675] usb 5-1: USB disconnect, device number 116
[ 1226.898321][ T9675] usblp0: removed
[ 1226.985338][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:33:37 executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
pidfd_open(r0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002040), 0x10b402, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_LK(r1, &(0x7f00000040c0)={0x28, 0x0, r2, {{0x0, 0x20, 0x0, r0}}}, 0x28)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000004140), 0x206540, 0x0)
getpriority(0x0, 0x0)
syz_clone3(&(0x7f0000004800)={0x60000000, &(0x7f0000004540), &(0x7f0000004580), &(0x7f00000045c0), {0x21}, 0x0, 0x0, 0x0, &(0x7f0000004780)=[r0], 0x1}, 0x58)

22:33:37 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1227.142895][T20535] team0: Port device vlan2 added
22:33:37 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1227.244209][  T918] usb 6-1: new high-speed USB device number 59 using dummy_hcd
22:33:37 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

[ 1227.325285][T20543] team0: Port device vlan2 removed
[ 1227.354232][ T9675] usb 5-1: new high-speed USB device number 117 using dummy_hcd
22:33:37 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1227.444443][  T918] usb 6-1: device descriptor read/64, error 18
22:33:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r2, @ANYBLOB="0b00000000000000140012800b000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0)

[ 1227.599180][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1227.604279][ T9675] usb 5-1: Using ep0 maxpacket: 32
[ 1227.714117][  T918] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1227.726363][ T9675] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1227.737271][T20556] team0: Port device vlan2 added
[ 1227.742338][ T9675] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1227.751279][ T9675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1227.771642][ T9675] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1227.794242][ T9675] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1227.814781][ T9675] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1227.837375][ T9675] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1227.849302][ T9675] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1227.862330][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.876800][ T9675] usb 5-1: config 0 descriptor??
[ 1227.944243][  T918] usb 6-1: device descriptor read/64, error 18
[ 1228.064411][  T918] usb usb6-port1: attempt power cycle
[ 1228.149819][ T9675] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1228.175061][ T9675] usb 5-1: USB disconnect, device number 117
[ 1228.202292][ T9675] usblp0: removed
[ 1228.474150][  T918] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1228.644490][  T918] usb 6-1: device descriptor read/8, error -61
[ 1228.714092][ T9675] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1228.914213][  T918] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1228.954121][ T9675] usb 5-1: Using ep0 maxpacket: 32
[ 1229.074285][ T9675] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1229.086480][ T9675] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1229.095404][  T918] usb 6-1: device descriptor read/8, error -61
[ 1229.112074][ T9675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1229.131451][ T9675] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1229.154943][ T9675] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1229.176766][ T9675] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1229.204965][ T9675] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1229.216251][  T918] usb usb6-port1: unable to enumerate USB device
[ 1229.229557][ T9675] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1229.248985][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1229.274825][ T9675] usb 5-1: config 0 descriptor??
[ 1229.877103][ T9675] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 118 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:41 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:41 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:33:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

22:33:41 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:33:41 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:41 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1231.080740][ T9675] usb 5-1: USB disconnect, device number 118
[ 1231.194393][ T9675] usblp0: removed
22:33:41 executing program 1:
r0 = socket(0xa, 0x3, 0x2)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040))

22:33:41 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:41 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:33:41 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

22:33:41 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:33:41 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

[ 1231.454100][T12930] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1231.624205][ T9675] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1231.654549][T12930] usb 6-1: device descriptor read/64, error 18
[ 1231.874289][ T9675] usb 5-1: Using ep0 maxpacket: 32
[ 1231.944168][T12930] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1231.994302][ T9675] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1232.003157][ T9675] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1232.021219][ T9675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1232.032317][ T9675] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1232.042606][ T9675] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1232.052834][ T9675] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1232.066357][ T9675] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1232.073040][ T9675] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1232.082583][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.100566][ T9675] usb 5-1: config 0 descriptor??
[ 1232.144183][T12930] usb 6-1: device descriptor read/64, error 18
[ 1232.275506][T12930] usb usb6-port1: attempt power cycle
[ 1232.365982][ T9675] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 119 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1232.392342][ T9675] usb 5-1: USB disconnect, device number 119
[ 1232.411522][ T9675] usblp0: removed
[ 1232.694494][T12930] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1232.884339][T12930] usb 6-1: device descriptor read/8, error -61
[ 1232.914317][ T9675] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1233.154166][T12930] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1233.164298][ T9675] usb 5-1: Using ep0 maxpacket: 32
[ 1233.294532][ T9675] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1233.303299][ T9675] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1233.311736][ T9675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1233.321114][ T9675] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1233.331132][ T9675] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1233.343216][T12930] usb 6-1: device descriptor read/8, error -61
[ 1233.343447][ T9675] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1233.365250][ T9675] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1233.372277][ T9675] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1233.382088][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.393229][ T9675] usb 5-1: config 0 descriptor??
[ 1233.474870][T12930] usb usb6-port1: unable to enumerate USB device
[ 1234.017860][ T9675] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:45 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:45 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:33:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fe", @ANYRES32], 0x38}}, 0x0)

[ 1235.223525][ T5274] usb 5-1: USB disconnect, device number 120
22:33:45 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:45 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8}]}, 0x7c}}, 0x0)

22:33:45 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1235.318419][ T5274] usblp0: removed
22:33:45 executing program 1:
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff}, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

22:33:45 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:33:45 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8}]}, 0x7c}}, 0x0)

22:33:45 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:45 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0)
write$tun(r0, &(0x7f0000000080)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @multicast, @empty, @broadcast}}, 0x1c)

22:33:45 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8}]}, 0x7c}}, 0x0)

[ 1235.624177][T12930] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1235.730803][ T5274] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1235.824367][T12930] usb 6-1: device descriptor read/64, error 18
[ 1235.974263][ T5274] usb 5-1: Using ep0 maxpacket: 32
[ 1236.094317][ T5274] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1236.102720][ T5274] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1236.117604][T12930] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1236.121858][ T5274] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1236.147090][ T5274] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1236.160874][ T5274] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1236.178352][ T5274] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1236.199270][ T5274] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1236.208088][ T5274] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1236.226993][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1236.242308][ T5274] usb 5-1: config 0 descriptor??
[ 1236.334356][T12930] usb 6-1: device descriptor read/64, error 18
[ 1236.465049][T12930] usb usb6-port1: attempt power cycle
[ 1236.507247][ T5274] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 121 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1236.533487][ T5274] usb 5-1: USB disconnect, device number 121
[ 1236.562896][ T5274] usblp0: removed
[ 1236.904173][T12930] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1237.064390][ T5274] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1237.075099][T12930] usb 6-1: device descriptor read/8, error -61
[ 1237.304159][ T5274] usb 5-1: Using ep0 maxpacket: 32
[ 1237.354224][T12930] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1237.424312][ T5274] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1237.432721][ T5274] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1237.450389][ T5274] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1237.463366][ T5274] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1237.481858][ T5274] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1237.491915][ T5274] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1237.514152][ T5274] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1237.520837][ T5274] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1237.537306][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1237.563127][ T5274] usb 5-1: config 0 descriptor??
[ 1237.574347][T12930] usb 6-1: device descriptor read/8, error -61
[ 1237.694597][T12930] usb usb6-port1: unable to enumerate USB device
22:33:49 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x12000, 0x0)

22:33:49 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:33:49 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:49 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:33:49 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:33:49 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

[ 1239.612938][ T5274] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1239.681418][ T5274] usb 5-1: USB disconnect, device number 122
22:33:49 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x100)

22:33:49 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:49 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:33:49 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1239.761350][ T5274] usblp0: removed
22:33:49 executing program 1:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22142, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x5)

22:33:49 executing program 3:
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x4004743c, 0x0)

22:33:49 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:33:50 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
write$FUSE_LK(r2, 0x0, 0x0)

22:33:50 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1239.954128][T11807] usb 6-1: new high-speed USB device number 71 using dummy_hcd
22:33:50 executing program 3:
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x4004743c, 0x0)

[ 1240.154597][ T5274] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1240.164132][T11807] usb 6-1: device descriptor read/64, error 18
[ 1240.404244][ T5274] usb 5-1: Using ep0 maxpacket: 32
[ 1240.444393][T11807] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1240.524327][ T5274] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1240.532845][ T5274] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1240.543251][ T5274] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1240.553066][ T5274] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1240.563368][ T5274] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1240.573778][ T5274] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1240.587263][ T5274] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1240.593935][ T5274] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1240.604086][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1240.623385][ T5274] usb 5-1: config 0 descriptor??
[ 1240.664409][T11807] usb 6-1: device descriptor read/64, error 18
[ 1240.794952][T11807] usb usb6-port1: attempt power cycle
[ 1240.886414][ T5274] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 123 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1240.902091][ T5274] usb 5-1: USB disconnect, device number 123
[ 1240.940377][ T5274] usblp0: removed
[ 1241.224155][T11807] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1241.394245][T11807] usb 6-1: device descriptor read/8, error -61
[ 1241.454210][ T5274] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1241.664178][T11807] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1241.724272][ T5274] usb 5-1: Using ep0 maxpacket: 32
[ 1241.834190][T11807] usb 6-1: device descriptor read/8, error -61
[ 1241.854445][ T5274] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1241.870771][ T5274] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1241.880110][ T5274] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1241.891238][ T5274] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1241.901659][ T5274] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1241.911662][ T5274] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1241.924959][ T5274] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1241.931814][ T5274] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1241.941062][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.954554][T11807] usb usb6-port1: unable to enumerate USB device
[ 1241.961660][ T5274] usb 5-1: config 0 descriptor??
22:33:52 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1243.124208][T11807] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1243.314230][T11807] usb 6-1: device descriptor read/64, error 18
[ 1243.594203][T11807] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1243.804153][T11807] usb 6-1: device descriptor read/64, error 18
[ 1243.901587][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.908047][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
[ 1243.924606][T11807] usb usb6-port1: attempt power cycle
22:33:54 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:54 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x2)

22:33:54 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:33:54 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:33:54 executing program 3:
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x4004743c, 0x0)

[ 1243.966324][ T5274] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1244.036351][ T5274] usb 5-1: USB disconnect, device number 124
22:33:54 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f00000002c0)={{0x2, 0x0, @loopback}, {0x1, @multicast}, 0x6, {0x2, 0x0, @private}, 'team_slave_0\x00'})

22:33:54 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:33:54 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1244.107966][ T5274] usblp0: removed
22:33:54 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:54 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', 0x0, 0x0)

[ 1244.334338][T11807] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1244.524320][ T5274] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1244.534417][T11807] usb 6-1: device descriptor read/8, error -61
[ 1244.764178][ T5274] usb 5-1: Using ep0 maxpacket: 32
[ 1244.814187][T11807] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1244.884256][ T5274] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1244.892673][ T5274] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1244.901005][ T5274] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1244.910308][ T5274] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1244.920364][ T5274] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1244.932164][ T5274] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1244.946290][ T5274] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1244.953084][ T5274] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1244.962480][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1244.983673][ T5274] usb 5-1: config 0 descriptor??
[ 1245.024329][T11807] usb 6-1: device descriptor read/8, error -61
[ 1245.145041][T11807] usb usb6-port1: unable to enumerate USB device
[ 1245.246344][ T5274] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 125 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1245.262278][ T5274] usb 5-1: USB disconnect, device number 125
[ 1245.281875][ T5274] usblp0: removed
22:33:55 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1245.834168][ T5274] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1246.074225][ T5274] usb 5-1: Using ep0 maxpacket: 32
[ 1246.144364][ T9675] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1246.194347][ T5274] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1246.202973][ T5274] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1246.211357][ T5274] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1246.220655][ T5274] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1246.230807][ T5274] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1246.248905][ T5274] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1246.270823][ T5274] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1246.278658][ T5274] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1246.298411][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1246.321119][ T5274] usb 5-1: config 0 descriptor??
[ 1246.334178][ T9675] usb 6-1: device descriptor read/64, error 18
[ 1246.604121][ T9675] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1246.794088][ T9675] usb 6-1: device descriptor read/64, error 18
[ 1246.914303][ T9675] usb usb6-port1: attempt power cycle
[ 1247.324302][ T9675] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1247.494474][ T9675] usb 6-1: device descriptor read/8, error -61
[ 1247.764225][ T9675] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1247.944482][ T9675] usb 6-1: device descriptor read/8, error -61
[ 1248.064505][ T9675] usb usb6-port1: unable to enumerate USB device
22:33:58 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:33:58 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:33:58 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:33:58 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:58 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', &(0x7f0000000040)=""/20, 0x14)

[ 1248.338279][ T5274] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
22:33:58 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:33:58 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0)

[ 1248.417660][ T5274] usb 5-1: USB disconnect, device number 126
22:33:58 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:33:58 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

[ 1248.501801][ T5274] usblp0: removed
22:33:58 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:33:58 executing program 1:
syz_clone(0x21000100, 0x0, 0x0, 0x0, 0x0, 0x0)

22:33:58 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d1900"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1248.884162][ T5274] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1249.124279][ T5274] usb 5-1: Using ep0 maxpacket: 32
[ 1249.204583][T15190] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1249.244210][ T5274] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1249.253132][ T5274] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1249.261692][ T5274] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1249.272711][ T5274] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1249.282751][ T5274] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1249.292702][ T5274] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1249.306078][ T5274] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1249.312800][ T5274] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1249.322027][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1249.344174][ T5274] usb 5-1: config 0 descriptor??
[ 1249.444181][T15190] usb 6-1: Using ep0 maxpacket: 8
[ 1249.484470][T15190] usb 6-1: no configurations
[ 1249.489152][T15190] usb 6-1: can't read configurations, error -22
[ 1249.608364][ T5274] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 127 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1249.641163][ T5274] usb 5-1: USB disconnect, device number 127
[ 1249.651056][T15190] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1249.683870][ T5274] usblp0: removed
[ 1249.904241][T15190] usb 6-1: Using ep0 maxpacket: 8
[ 1249.948956][T15190] usb 6-1: no configurations
[ 1249.953602][T15190] usb 6-1: can't read configurations, error -22
[ 1249.960821][T15190] usb usb6-port1: attempt power cycle
[ 1250.154262][ T5274] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1250.374466][T15190] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1250.404281][ T5274] usb 5-1: Using ep0 maxpacket: 32
[ 1250.464648][T15190] usb 6-1: Using ep0 maxpacket: 8
[ 1250.504453][T15190] usb 6-1: no configurations
[ 1250.509285][T15190] usb 6-1: can't read configurations, error -22
[ 1250.534423][ T5274] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1250.543164][ T5274] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1250.551892][ T5274] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1250.562921][ T5274] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1250.573358][ T5274] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1250.583538][ T5274] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1250.599590][ T5274] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1250.606423][ T5274] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1250.615773][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1250.626730][ T5274] usb 5-1: config 0 descriptor??
[ 1250.664146][T15190] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1250.774482][T15190] usb 6-1: Using ep0 maxpacket: 8
[ 1250.826260][T15190] usb 6-1: no configurations
[ 1250.831265][T15190] usb 6-1: can't read configurations, error -22
[ 1250.838157][T15190] usb usb6-port1: unable to enumerate USB device
[ 1250.886373][ T5274] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1250.907008][ T5274] usb 5-1: USB disconnect, device number 2
[ 1250.931143][ T5274] usblp0: removed
22:34:01 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:34:01 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:34:01 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xffff331a, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)

22:34:01 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:01 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d1900"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:01 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:34:01 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:01 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340))
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

22:34:01 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:02 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:34:02 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1252.067467][T20713] input: syz1 as /devices/virtual/input/input11
[ 1252.184148][T15190] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1252.264436][ T5274] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1252.454503][T15190] usb 5-1: Using ep0 maxpacket: 32
[ 1252.514517][ T5274] usb 6-1: Using ep0 maxpacket: 8
[ 1252.554511][ T5274] usb 6-1: no configurations
[ 1252.559168][ T5274] usb 6-1: can't read configurations, error -22
[ 1252.584230][T15190] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1252.592752][T15190] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1252.600988][T15190] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1252.611754][T15190] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1252.622003][T15190] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1252.632158][T15190] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1252.647589][T15190] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1252.654338][T15190] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1252.663461][T15190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.673439][T15190] usb 5-1: config 0 descriptor??
[ 1252.715815][ T5274] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1252.926476][T15190] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1252.942169][T15190] usb 5-1: USB disconnect, device number 3
[ 1252.963490][T15190] usblp0: removed
[ 1252.974803][ T5274] usb 6-1: Using ep0 maxpacket: 8
[ 1253.014707][ T5274] usb 6-1: no configurations
[ 1253.022115][ T5274] usb 6-1: can't read configurations, error -22
[ 1253.028954][ T5274] usb usb6-port1: attempt power cycle
[ 1253.474132][ T5274] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1253.495151][T15190] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1253.576385][ T5274] usb 6-1: Using ep0 maxpacket: 8
[ 1253.625635][ T5274] usb 6-1: no configurations
[ 1253.631687][ T5274] usb 6-1: can't read configurations, error -22
[ 1253.744160][T15190] usb 5-1: Using ep0 maxpacket: 32
[ 1253.784114][ T5274] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1253.874512][T15190] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1253.882919][T15190] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1253.891632][T15190] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1253.901030][ T5274] usb 6-1: Using ep0 maxpacket: 8
[ 1253.908117][T15190] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1253.918503][T15190] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1253.928977][T15190] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1253.943807][T15190] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1253.951156][ T5274] usb 6-1: no configurations
[ 1253.955900][ T5274] usb 6-1: can't read configurations, error -22
[ 1253.962281][T15190] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1253.972511][ T5274] usb usb6-port1: unable to enumerate USB device
[ 1253.979222][T15190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1253.998175][T15190] usb 5-1: config 0 descriptor??
[ 1254.256399][T15190] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1254.286110][T15190] usb 5-1: USB disconnect, device number 4
[ 1254.322328][T15190] usblp0: removed
22:34:05 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:34:05 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340))
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

22:34:05 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:05 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

22:34:05 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:05 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d1900"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:05 executing program 2:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:05 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

[ 1255.250710][T20728] input: syz1 as /devices/virtual/input/input12
22:34:05 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0)

[ 1255.348468][T18571] udevd[18571]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
22:34:05 executing program 1:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0)

22:34:05 executing program 2:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:05 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

[ 1255.524421][ T5269] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1255.584409][T15190] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1255.794085][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1255.824269][T15190] usb 5-1: Using ep0 maxpacket: 32
[ 1255.854396][ T5269] usb 6-1: no configurations
[ 1255.859217][ T5269] usb 6-1: can't read configurations, error -22
[ 1255.944474][T15190] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1255.956430][T15190] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1255.969778][T15190] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1255.979282][T15190] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1255.990959][T15190] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1256.002349][T15190] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1256.016874][T15190] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1256.023632][T15190] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1256.024420][ T5269] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1256.032901][T15190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1256.058369][T15190] usb 5-1: config 0 descriptor??
[ 1256.304091][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1256.328670][T15190] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1256.344429][ T5269] usb 6-1: no configurations
[ 1256.349289][ T5269] usb 6-1: can't read configurations, error -22
[ 1256.356513][ T5269] usb usb6-port1: attempt power cycle
[ 1256.373615][T15190] usb 5-1: USB disconnect, device number 5
[ 1256.405925][T15190] usblp0: removed
[ 1256.784085][ T5269] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1256.874374][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1256.914171][T15190] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1256.924657][ T5269] usb 6-1: no configurations
[ 1256.929710][ T5269] usb 6-1: can't read configurations, error -22
[ 1257.084295][ T5269] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1257.154324][T15190] usb 5-1: Using ep0 maxpacket: 32
[ 1257.174331][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1257.214379][ T5269] usb 6-1: no configurations
[ 1257.219057][ T5269] usb 6-1: can't read configurations, error -22
[ 1257.226336][ T5269] usb usb6-port1: unable to enumerate USB device
[ 1257.274224][T15190] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1257.282650][T15190] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1257.290936][T15190] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1257.300075][T15190] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1257.310129][T15190] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1257.323503][T15190] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1257.336984][T15190] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1257.343746][T15190] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1257.362427][T15190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1257.386273][T15190] usb 5-1: config 0 descriptor??
[ 1257.648034][T15190] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1257.663330][T15190] usb 5-1: USB disconnect, device number 6
[ 1257.684597][T15190] usblp0: removed
22:34:08 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0xa0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4})

22:34:08 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x4004743c, 0x0)

22:34:08 executing program 2:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:08 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:08 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:34:08 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d190000000109021200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:08 executing program 2:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:08 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:08 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x4004743c, 0x0)

22:34:08 executing program 1:
r0 = io_uring_setup(0x6bde, &(0x7f0000000000)={0x0, 0x47e3})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080), 0x1)

22:34:08 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

[ 1258.864729][ T5269] usb 6-1: new high-speed USB device number 95 using dummy_hcd
22:34:08 executing program 1:
prctl$PR_CAPBSET_DROP(0x17, 0x1000000)

22:34:08 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x4004743c, 0x0)

[ 1258.934339][T12934] usb 5-1: new high-speed USB device number 7 using dummy_hcd
22:34:09 executing program 2:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:09 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:09 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000001400))

[ 1259.114412][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1259.214407][T12934] usb 5-1: Using ep0 maxpacket: 32
[ 1259.234548][ T5269] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1259.246691][ T5269] usb 6-1: config 0 has no interfaces?
[ 1259.252454][ T5269] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1259.264906][ T5269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1259.278567][ T5269] usb 6-1: config 0 descriptor??
[ 1259.344284][T12934] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1259.352878][T12934] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1259.362582][T12934] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1259.371736][T12934] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1259.381806][T12934] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1259.391849][T12934] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1259.405321][T12934] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1259.412087][T12934] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1259.421383][T12934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1259.431484][T12934] usb 5-1: config 0 descriptor??
[ 1259.706442][T12934] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1259.721310][T12934] usb 5-1: USB disconnect, device number 7
[ 1259.745500][T12934] usblp0: removed
22:34:10 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

[ 1261.124132][T15190] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1261.364089][T15190] usb 5-1: Using ep0 maxpacket: 32
[ 1261.484175][T15190] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1261.492846][T15190] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1261.514419][T15190] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1261.523360][T15190] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1261.533608][T15190] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1261.543698][T15190] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1261.557032][T15190] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1261.563709][T15190] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1261.572939][T15190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:34:11 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:11 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d190000000109021200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:11 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000100)={0x80000001, 0xfffffffffffffff8}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00')
fcntl$lock(r1, 0x0, &(0x7f0000000240))
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x7, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5450, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x2, 'veth0_to_bond\x00', {0x8}, 0xf2c8})

22:34:11 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00010c0000000c0001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:34:11 executing program 2:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1261.593787][T15190] usb 5-1: config 0 descriptor??
[ 1261.611634][  T918] usb 6-1: USB disconnect, device number 95
22:34:11 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
sendfile(0xffffffffffffffff, r3, 0x0, 0x100803600)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)

22:34:11 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

[ 1261.859573][T15190] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1261.908194][T15190] usb 5-1: USB disconnect, device number 8
[ 1261.924278][ T5269] usb 2-1: new high-speed USB device number 87 using dummy_hcd
22:34:12 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r9 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x7c}}, 0x0)

[ 1261.975955][T15190] usblp0: removed
22:34:12 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:12 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r9 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x7c}}, 0x0)

[ 1262.124313][  T918] usb 6-1: new high-speed USB device number 96 using dummy_hcd
22:34:12 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1262.184243][ T5269] usb 2-1: Using ep0 maxpacket: 32
[ 1262.325090][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1262.337429][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1262.347765][ T5269] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1262.360187][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1262.379462][  T918] usb 6-1: Using ep0 maxpacket: 8
[ 1262.383789][ T5269] usb 2-1: config 0 descriptor??
[ 1262.435598][ T5269] hub 2-1:0.0: USB hub found
[ 1262.504169][  T918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1262.544658][  T918] usb 6-1: config 0 has no interfaces?
[ 1262.550182][  T918] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1262.568658][  T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1262.590551][  T918] usb 6-1: config 0 descriptor??
[ 1262.654231][ T5269] hub 2-1:0.0: 1 port detected
22:34:12 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:34:12 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r9 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x7c}}, 0x0)

[ 1263.234180][ T5269] hub 2-1:0.0: set hub depth failed
[ 1263.258631][ T5269] usb 2-1: USB disconnect, device number 87
[ 1263.314494][T12930] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1263.604131][T12930] usb 5-1: Using ep0 maxpacket: 32
[ 1263.753208][T12930] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1263.761755][T12930] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1263.771410][T12930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1263.780779][T12930] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1263.792783][T12930] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1263.803071][T12930] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1263.820350][T12930] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1263.828209][T12930] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1263.839502][T12930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1263.850809][T12930] usb 5-1: config 0 descriptor??
[ 1264.116105][T12930] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1264.130395][T12930] usb 5-1: USB disconnect, device number 9
[ 1264.165319][T12930] usblp0: removed
[ 1264.377144][ T5142] kworker/dying (5142) used greatest stack depth: 21520 bytes left
22:34:14 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d190000000109021200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:14 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:14 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:14 executing program 3:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}})

22:34:14 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00010c0000000c0001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1264.744744][T15190] usb 6-1: USB disconnect, device number 96
22:34:14 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00010c0000000c0001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000013c0)={0x18, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x18, &(0x7f00000007c0)={0x0, 0x0, 0x4, "d022cbe9"}, 0x0, 0x0, 0x0, 0x0})

22:34:14 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:14 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:15 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:15 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1265.130508][T12930] usb 2-1: new high-speed USB device number 88 using dummy_hcd
22:34:15 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:34:15 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

[ 1265.244079][ T9675] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1265.254454][T15190] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1265.384096][T12930] usb 2-1: Using ep0 maxpacket: 32
[ 1265.494301][T15190] usb 6-1: Using ep0 maxpacket: 8
[ 1265.504213][ T9675] usb 4-1: Using ep0 maxpacket: 32
[ 1265.504860][T12930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1265.510065][T12930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1265.536014][T12930] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1265.545617][T12930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.563405][T12930] usb 2-1: config 0 descriptor??
[ 1265.614262][ T5269] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1265.614500][T15190] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1265.633847][T12930] hub 2-1:0.0: USB hub found
[ 1265.643645][T15190] usb 6-1: config 0 has no interfaces?
[ 1265.649782][T15190] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1265.659502][T15190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.667865][ T9675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1265.681392][T15190] usb 6-1: config 0 descriptor??
[ 1265.686857][ T9675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1265.697043][ T9675] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1265.708255][ T9675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.720241][ T9675] usb 4-1: config 0 descriptor??
[ 1265.765911][ T9675] hub 4-1:0.0: USB hub found
[ 1265.854431][T12930] hub 2-1:0.0: 1 port detected
[ 1265.884094][ T5269] usb 5-1: Using ep0 maxpacket: 32
[ 1265.984315][ T9675] hub 4-1:0.0: 1 port detected
[ 1266.014578][ T5269] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1266.023663][ T5269] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1266.032501][ T5269] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1266.042525][ T5269] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1266.052774][ T5269] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1266.063004][ T5269] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1266.080487][ T5269] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1266.090091][ T5269] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1266.100726][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.120532][ T5269] usb 5-1: config 0 descriptor??
[ 1266.377503][T20849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1266.387201][T20849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1266.395608][T12930] hub 2-1:0.0: set hub depth failed
[ 1266.431106][ T5269] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1266.447035][T12930] usb 2-1: USB disconnect, device number 88
[ 1266.463653][ T5269] usb 5-1: USB disconnect, device number 10
[ 1266.516403][ T5269] usblp0: removed
[ 1266.854324][  T918] hub 4-1:0.0: activate --> -90
[ 1267.276659][ T9675] usb 4-1: USB disconnect, device number 30
[ 1267.545916][  T918] usb 4-1-port1: config error
22:34:17 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:17 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:17 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:17 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00010c0000000c0001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:34:17 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:34:17 executing program 3:
syz_clone(0x48021000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1267.886816][ T9675] usb 6-1: USB disconnect, device number 97
22:34:18 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:18 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:18 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:18 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

[ 1268.224300][  T918] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1268.232130][T15190] usb 5-1: new high-speed USB device number 11 using dummy_hcd
22:34:18 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:18 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

[ 1268.394111][ T9675] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1268.487881][  T918] usb 2-1: Using ep0 maxpacket: 32
[ 1268.493425][T15190] usb 5-1: Using ep0 maxpacket: 32
[ 1268.614692][  T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1268.627894][  T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1268.638710][T15190] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1268.647522][T15190] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1268.656291][ T9675] usb 6-1: Using ep0 maxpacket: 8
[ 1268.661993][  T918] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1268.671781][T15190] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1268.691458][  T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.701037][T15190] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1268.720627][  T918] usb 2-1: config 0 descriptor??
[ 1268.730158][T15190] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1268.745936][T15190] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1268.760403][T15190] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1268.767206][T15190] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1268.778214][  T918] hub 2-1:0.0: USB hub found
[ 1268.784773][T15190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.804436][ T9675] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1268.816562][T15190] usb 5-1: config 0 descriptor??
[ 1268.821926][ T9675] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1268.832103][ T9675] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1268.842123][ T9675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.853395][ T9675] usb 6-1: config 0 descriptor??
[ 1268.994273][  T918] hub 2-1:0.0: 1 port detected
[ 1269.066555][T20861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1269.077750][T20861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1269.122242][T15190] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1269.158636][T15190] usb 5-1: USB disconnect, device number 11
[ 1269.183533][T15190] usblp0: removed
[ 1269.564252][  T918] hub 2-1:0.0: set hub depth failed
[ 1269.600063][  T918] usb 2-1: USB disconnect, device number 89
22:34:21 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:21 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xd26c54b})
write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)

22:34:21 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:21 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0), 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:21 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:34:21 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00010c0000000c0001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1271.014898][ T9670] usb 6-1: USB disconnect, device number 98
22:34:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="f4", 0x1}], 0x1}}], 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

22:34:21 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0), 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:21 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

[ 1271.252150][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
22:34:21 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:21 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0), 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="f4", 0x1}], 0x1}}], 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

[ 1271.394189][ T5269] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1271.402000][T11807] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1271.435700][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1271.534857][ T9670] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1271.644202][ T5269] usb 2-1: Using ep0 maxpacket: 32
[ 1271.654312][T11807] usb 5-1: Using ep0 maxpacket: 32
[ 1271.774207][ T9670] usb 6-1: Using ep0 maxpacket: 8
[ 1271.784583][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1271.795987][T11807] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1271.805021][T11807] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1271.813552][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1271.823516][T11807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1271.834170][ T5269] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1271.843322][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1271.851633][T11807] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1271.863822][T11807] usb 5-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1271.875030][ T5269] usb 2-1: config 0 descriptor??
[ 1271.889766][T11807] usb 5-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1271.894500][ T9670] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1271.904103][T11807] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1271.920447][ T9670] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1271.921870][ T5269] hub 2-1:0.0: USB hub found
[ 1271.930170][ T9670] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1271.944452][ T9670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1271.956500][T11807] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1271.959282][ T9670] usb 6-1: config 0 descriptor??
[ 1271.970117][T11807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1271.986545][T11807] usb 5-1: config 0 descriptor??
[ 1272.134282][ T5269] hub 2-1:0.0: 1 port detected
[ 1272.239931][T20894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1272.250494][T20894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1272.272674][T11807] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1272.300178][T11807] usb 5-1: USB disconnect, device number 12
[ 1272.329810][T11807] usblp0: removed
[ 1272.694505][ T5269] hub 2-1:0.0: set hub depth failed
[ 1272.726787][ T5269] usb 2-1: USB disconnect, device number 90
22:34:24 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:24 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:24 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

22:34:24 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:24 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

22:34:24 executing program 1:
socketpair(0x1, 0x0, 0x8001, &(0x7f00000000c0))

[ 1274.158023][ T5269] usb 6-1: USB disconnect, device number 99
22:34:24 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:24 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "a6"}]}}, 0x0, 0x2a}, 0x20)

22:34:24 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:24 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:24 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200427ad, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=0xffffffffffffffff)

22:34:24 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1274.664343][ T5269] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1274.684369][T11807] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1274.904133][T11807] usb 5-1: device descriptor read/64, error 18
[ 1274.934171][ T5269] usb 6-1: Using ep0 maxpacket: 8
[ 1275.084649][ T5269] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1275.095221][ T5269] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1275.104449][ T5269] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1275.117032][ T5269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1275.127506][ T5269] usb 6-1: config 0 descriptor??
[ 1275.184396][T11807] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1275.374301][T11807] usb 5-1: device descriptor read/64, error 18
[ 1275.495568][T11807] usb usb5-port1: attempt power cycle
[ 1275.934269][T11807] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1276.134374][T11807] usb 5-1: device descriptor read/8, error -61
[ 1276.414214][T11807] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1276.604411][T11807] usb 5-1: device descriptor read/8, error -61
[ 1276.724415][T11807] usb usb5-port1: unable to enumerate USB device
22:34:27 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d190000000109021200010000000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:27 executing program 1:
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000', @ANYRESDEC=0x0])
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x4b52, &(0x7f0000000100))

22:34:27 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:27 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

22:34:27 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

22:34:27 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

[ 1277.288504][T12934] usb 6-1: USB disconnect, device number 100
22:34:27 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:27 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@generic={0x5}]}, &(0x7f0000000c40)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000300)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

22:34:27 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:27 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15}]}}}]}}]}}, 0x0)

22:34:27 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:27 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

[ 1277.844214][  T918] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1277.854775][T12934] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 1277.914285][T15190] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1278.034208][  T918] usb 5-1: device descriptor read/64, error 18
[ 1278.104191][T12934] usb 6-1: Using ep0 maxpacket: 8
[ 1278.154198][T15190] usb 2-1: Using ep0 maxpacket: 8
[ 1278.246843][T12934] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1278.256328][T12934] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1278.266331][T12934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.274320][T15190] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1278.289895][T12934] usb 6-1: config 0 descriptor??
[ 1278.304146][  T918] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1278.434409][T15190] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1278.443525][T15190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1278.462101][T15190] usb 2-1: Product: syz
[ 1278.468250][T15190] usb 2-1: Manufacturer: syz
[ 1278.472885][T15190] usb 2-1: SerialNumber: syz
[ 1278.514458][  T918] usb 5-1: device descriptor read/64, error 18
[ 1278.535923][T15190] cdc_ether: probe of 2-1:1.0 failed with error -22
[ 1278.634741][  T918] usb usb5-port1: attempt power cycle
[ 1278.740767][T12934] usb 2-1: USB disconnect, device number 91
[ 1279.044326][  T918] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1279.224274][  T918] usb 5-1: device descriptor read/8, error -61
[ 1279.494410][  T918] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1279.674502][  T918] usb 5-1: device descriptor read/8, error -61
[ 1279.794793][  T918] usb usb5-port1: unable to enumerate USB device
22:34:30 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:30 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d190000000109021200010000000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:30 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:30 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
close(r0)

22:34:30 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
socket$inet6_sctp(0xa, 0x0, 0x84)
ioctl$TCSBRK(r0, 0x5409, 0x5)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

22:34:30 executing program 4:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

[ 1280.445214][T12934] usb 6-1: USB disconnect, device number 101
22:34:30 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000740), 0x8)

22:34:30 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:30 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:30 executing program 3:
io_setup(0x0, &(0x7f0000000040)=<r0=>0x0)
io_getevents(r0, 0x0, 0x57, 0x0, &(0x7f0000000180))

22:34:30 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:30 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r4, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
read$watch_queue(r0, &(0x7f0000000000)=""/69, 0x45)

[ 1281.004247][ T9670] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1281.024307][T12934] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 1281.204233][ T9670] usb 5-1: device descriptor read/64, error 18
[ 1281.297155][T12934] usb 6-1: Using ep0 maxpacket: 8
[ 1281.434545][T12934] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1281.443892][T12934] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1281.457364][T12934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1281.470915][T12934] usb 6-1: config 0 descriptor??
[ 1281.484228][ T9670] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1281.674294][ T9670] usb 5-1: device descriptor read/64, error 18
[ 1281.795324][ T9670] usb usb5-port1: attempt power cycle
[ 1282.204310][ T9670] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1282.374660][ T9670] usb 5-1: device descriptor read/8, error -61
[ 1282.644272][ T9670] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1282.824329][ T9670] usb 5-1: device descriptor read/8, error -61
[ 1282.945553][ T9670] usb usb5-port1: unable to enumerate USB device
22:34:33 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d190000000109021200010000000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:33 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:33 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r4, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:33 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
accept4(r0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001a80)}, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x4008800)
recvmmsg(0xffffffffffffffff, &(0x7f000000a0c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1a1, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, 0x0)

22:34:33 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000021c0)={'sit0\x00', 0x0})

22:34:33 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

[ 1283.601104][T12934] usb 6-1: USB disconnect, device number 102
22:34:33 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

22:34:33 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r4, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:33 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@bloom_filter={0x1e, 0x0, 0x4, 0x79e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48)

22:34:33 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r4, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:33 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1284.124254][T12934] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 1284.174120][  T918] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1284.364204][  T918] usb 5-1: device descriptor read/64, error 18
[ 1284.394178][T12934] usb 6-1: Using ep0 maxpacket: 8
[ 1284.564451][T12934] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1284.574994][T12934] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1284.584881][T12934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1284.604679][T12934] usb 6-1: config 0 descriptor??
[ 1284.634259][  T918] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1284.824394][  T918] usb 5-1: device descriptor read/64, error 18
[ 1284.945451][  T918] usb usb5-port1: attempt power cycle
[ 1285.354265][  T918] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1285.524625][  T918] usb 5-1: device descriptor read/8, error -61
[ 1285.794516][  T918] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1285.988243][  T918] usb 5-1: device descriptor read/8, error -61
[ 1286.114320][  T918] usb usb5-port1: unable to enumerate USB device
22:34:36 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:36 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0)

22:34:36 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x16, 0x0, 0xfffffffe, 0x1}, 0x48)

22:34:36 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r4, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:36 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:36 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

[ 1286.729734][ T9670] usb 6-1: USB disconnect, device number 103
22:34:36 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:36 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x301200, 0x0)
close(r0)

22:34:36 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x16, 0x0, 0x0, 0x1}, 0x48)

22:34:36 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='svc_xprt_enqueue\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r10 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r4, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x7c}}, 0x0)

22:34:37 executing program 3:
syz_clone(0x2a17d8940000, 0x0, 0x0, 0x0, 0x0, 0x0)

22:34:37 executing program 1:
syz_clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180)="5c2fac905e55b7f60ca5fa41e3f9d4c720643087e0a073e5aa2105d844eeb164737047663fcdf98d99394fa540395d3444778a9026ae09afbe5993c07dd2b385b5ec4df9a02960e63bf069741126053fce67d3922430fa9d5aa98ad5de2b8c7cd1de589b807f9fa43b638e7b33549b5d7b9a2a58c76929719874688c62a231ba6b4577aab725")

[ 1287.264415][ T9670] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[ 1287.274617][ T5269] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1287.464244][ T5269] usb 5-1: device descriptor read/64, error 18
[ 1287.514043][ T9670] usb 6-1: Using ep0 maxpacket: 8
[ 1287.654578][ T9670] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1287.674019][ T9670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.700847][ T9670] usb 6-1: config 0 descriptor??
[ 1287.734470][ T5269] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1287.924265][ T5269] usb 5-1: device descriptor read/64, error 18
[ 1288.045425][ T5269] usb usb5-port1: attempt power cycle
[ 1288.184527][ T9670] CoreChips: probe of 6-1:0.0 failed with error -32
[ 1288.474107][ T5269] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1288.644401][ T5269] usb 5-1: device descriptor read/8, error -61
[ 1288.934369][ T5269] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1289.114340][ T5269] usb 5-1: device descriptor read/8, error -61
[ 1289.234376][ T5269] usb usb5-port1: unable to enumerate USB device
22:34:39 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:39 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:39 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:39 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x5601, &(0x7f0000000040))

22:34:39 executing program 1:
syz_clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180)="5c2fac905e55b7f60ca5fa41e3f9d4c720643087e0a073e5aa2105d844eeb164737047663fcdf98d99394fa540395d3444778a9026ae09afbe5993c07dd2b385b5ec4df9a02960e63bf069741126053fce67d3922430fa9d5aa98ad5de2b8c7cd1de589b807f9fa43b638e7b33549b5d7b9a2a58c76929719874688c62a231ba6b4577aab725")

22:34:39 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

[ 1289.843816][T15190] usb 6-1: USB disconnect, device number 104
22:34:39 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:39 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$incfs(r0, &(0x7f0000000240)='.pending_reads\x00', 0x0, 0x0)

22:34:40 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:40 executing program 3:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1caf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8a27}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0)

22:34:40 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:40 executing program 1:
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f00000002c0)={0x0, 0x0, 0x6}})

[ 1290.210152][    C1] hrtimer: interrupt took 5095574 ns
[ 1290.414117][T15190] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 1290.662099][T11807] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1290.704261][T15190] usb 6-1: Using ep0 maxpacket: 8
[ 1290.824366][T15190] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[ 1290.838280][T15190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.863185][T15190] usb 6-1: config 0 descriptor??
[ 1291.374262][T15190] CoreChips: probe of 6-1:0.0 failed with error -32
[ 1291.955435][T11807] usb 5-1: device descriptor read/64, error 18
[ 1292.747391][T11807] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1293.048700][ T5269] usb 6-1: USB disconnect, device number 105
22:34:43 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

22:34:43 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009100000000ffff00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000e80)={0xc0, 0x0, 0x1d000})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000e00)={0x28, 0x2, 0x0, {0x3, 0x83, 0x8}}, 0x28)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, 0x5, 0x80000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000005cfa7259c43e566b0000851000000000000097f18e79c28215f54b9a56ffbab6b3e808f82f2fb3c38a77d83760e5edba86ae8041ee887ff086e11a330c23d45e89d851b3457501b4f5959098fc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x4, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x3}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500120}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600002429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="61531a0400000000000000672ea62010f262b30a97bec48def8f7520246c2edba1966b37cf60f2ea7763df47dfe3678c3581"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000f80)=ANY=[@ANYBLOB="500800002d0025000000000000001e0fc5bdbccc030000000000", @ANYRES32, @ANYBLOB="00fff7f3bc92ae6b8263546de9d697bf464aa295bb0bb077e56794101a430dec72849dcd452f008ef4fba2dac547550e9ea6dcd691ff21b63dfdae2b600608fcb85a9d2f637fc5a940a0b49e68f6bdcef682cb765ef6949b69d4c42853a4e580d9b71f7d83e087737310f494502765d07f41350f5121aa940c60ea70fc0a791a98716004744b301711ab263fa840f9d776c07b4d70c16d8b490bcdc9c4e090f9c4129c9a92c413305f1cc650cb0d8385602c37c5778a4e0e6b09ed1a88b8163d9f42cc8f866d304ac0db"], 0x850}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @empty, @mcast2={0xff, 0x3}, 0x2000, 0xba08}})
connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @random="59d587369286"}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="f1ff01000f00f30b0008000b000800000008000b00ff030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4008094)
r11 = socket(0x1, 0x803, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000007c0)=r5, 0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x8002}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1e}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x7c}}, 0x0)

22:34:43 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0185500, &(0x7f0000000040)=@usbdevfs_connect={0xc20})

22:34:43 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:43 executing program 3:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1caf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8a27}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0)

22:34:43 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:34:43 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:44 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1294.684482][T11807] usb 5-1: device descriptor read/64, error -71
22:34:45 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1295.284350][T11807] usb usb5-port1: attempt power cycle
22:34:45 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

[ 1296.481377][ T5269] usb 6-1: new high-speed USB device number 106 using dummy_hcd
22:34:47 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001540)=ANY=[], 0x178)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)

22:34:47 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

22:34:47 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1299.508421][T11807] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1300.103736][ T5269] usb 6-1: device descriptor read/64, error -71
[ 1302.332780][T11807] usb 5-1: device descriptor read/8, error -71
[ 1305.660843][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.667204][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
[ 1321.922372][T12930] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2680 jiffies s: 28833 root: 0x1/.
[ 1321.934905][T12930] rcu: blocking rcu_node structures (internal RCU debug):
[ 1321.942253][T12930] Sending NMI from CPU 1 to CPUs 0:
[ 1321.948122][    C0] NMI backtrace for cpu 0
[ 1321.948137][    C0] CPU: 0 PID: 21113 Comm: syz-executor.3 Not tainted 6.5.0-rc3-syzkaller-00020-gaf2e19389c2c #0
[ 1321.948176][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 1321.948193][    C0] RIP: 0010:__lock_acquire+0xd22/0x5de0
[ 1321.948241][    C0] Code: c1 c2 06 31 ca 01 d8 89 d1 29 d3 c1 c1 08 89 dd 01 c2 31 cd 89 e9 29 e8 01 d5 c1 c1 10 89 ee 31 c1 89 c8 29 ca 01 e9 c1 c8 0d <31> c2 89 d0 29 d6 01 ca c1 c0 04 89 d2 31 f0 48 c1 e0 20 48 09 d0
[ 1321.948271][    C0] RSP: 0018:ffffc900000077d8 EFLAGS: 00000096
[ 1321.948293][    C0] RAX: 0000000062d70f17 RBX: 000000000002dac5 RCX: 00000000df07e984
[ 1321.948312][    C0] RDX: 000000001e1a2d96 RSI: 00000000fd24fd2a RDI: ffffffff918ddaf0
[ 1321.948332][    C0] RBP: 00000000fd24fd2a R08: 0000000000000000 R09: fffffbfff23095fd
[ 1321.948351][    C0] R10: ffffffff9184afef R11: 0000000000000001 R12: ffff888077ef64ca
[ 1321.948371][    C0] R13: ffff888077ef64a8 R14: 00000000ffffffff R15: 0000000000000002
[ 1321.948390][    C0] FS:  0000000000000000(0000) GS:ffff8880b9800000(0063) knlGS:00000000f7fe3b40
[ 1321.948421][    C0] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1321.948441][    C0] CR2: 000000002fb22000 CR3: 000000001f467000 CR4: 00000000003506f0
[ 1321.948461][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1321.948478][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1321.948497][    C0] Call Trace:
[ 1321.948505][    C0]  <NMI>
[ 1321.948515][    C0]  ? nmi_cpu_backtrace+0x1d4/0x380
[ 1321.948657][    C0]  ? __lock_acquire+0xd22/0x5de0
[ 1321.948697][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x10
[ 1321.948748][    C0]  ? nmi_handle+0x145/0x400
[ 1321.948788][    C0]  ? __lock_acquire+0xd22/0x5de0
[ 1321.948827][    C0]  ? default_do_nmi+0x69/0x160
[ 1321.948909][    C0]  ? exc_nmi+0x171/0x1e0
[ 1321.948940][    C0]  ? end_repeat_nmi+0x16/0x31
[ 1321.949012][    C0]  ? __lock_acquire+0xd22/0x5de0
[ 1321.949052][    C0]  ? __lock_acquire+0xd22/0x5de0
[ 1321.949092][    C0]  ? __lock_acquire+0xd22/0x5de0
[ 1321.949130][    C0]  </NMI>
[ 1321.949138][    C0]  <IRQ>
[ 1321.949161][    C0]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 1321.949201][    C0]  ? lock_acquire+0x1ae/0x510
[ 1321.949241][    C0]  ? lock_acquire+0x1ae/0x510
[ 1321.949281][    C0]  lock_acquire+0x1ae/0x510
[ 1321.949319][    C0]  ? advance_sched+0xd5/0xc60
[ 1321.949440][    C0]  ? lock_sync+0x190/0x190
[ 1321.949477][    C0]  ? do_raw_spin_unlock+0x173/0x230
[ 1321.949521][    C0]  ? do_raw_spin_unlock+0x173/0x230
[ 1321.949563][    C0]  ? find_held_lock+0x2d/0x110
[ 1321.949598][    C0]  ? taprio_dequeue+0x5f0/0x5f0
[ 1321.949629][    C0]  _raw_spin_lock+0x2e/0x40
[ 1321.949694][    C0]  ? advance_sched+0xd5/0xc60
[ 1321.949725][    C0]  advance_sched+0xd5/0xc60
[ 1321.949760][    C0]  ? timerqueue_del+0x83/0x140
[ 1321.949795][    C0]  ? do_raw_spin_unlock+0x173/0x230
[ 1321.949839][    C0]  ? taprio_dequeue+0x5f0/0x5f0
[ 1321.949870][    C0]  __hrtimer_run_queues+0x203/0xc10
[ 1321.949913][    C0]  ? enqueue_hrtimer+0x310/0x310
[ 1321.949947][    C0]  ? ktime_get_update_offsets_now+0x3bc/0x610
[ 1321.949997][    C0]  hrtimer_interrupt+0x31b/0x800
[ 1321.950043][    C0]  __sysvec_apic_timer_interrupt+0x14a/0x430
[ 1321.950081][    C0]  sysvec_apic_timer_interrupt+0x42/0xc0
[ 1321.950119][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1321.950157][    C0] RIP: 0010:taprio_dequeue_tc_priority+0x289/0x4b0
[ 1321.950193][    C0] Code: 48 8b 04 24 0f b6 00 38 44 24 36 7c 08 84 c0 0f 85 bf 01 00 00 8b 33 8b 4c 24 30 48 8b 54 24 38 48 8b 7c 24 20 e8 a7 f4 ff ff <49> 83 ff 10 48 89 44 24 08 0f 87 87 01 00 00 49 83 ff 0f 0f 87 69
[ 1321.950221][    C0] RSP: 0018:ffffc90000007d70 EFLAGS: 00000282
[ 1321.950242][    C0] RAX: 0000000000000000 RBX: ffff88807a854394 RCX: 0000000000000100
[ 1321.950261][    C0] RDX: ffff888077ef5940 RSI: ffffffff88597730 RDI: ffff88802b2a48d8
[ 1321.950282][    C0] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000
[ 1321.950300][    C0] R10: 0000000000000000 R11: ffffc90000007ff8 R12: 0000000000000010
[ 1321.950318][    C0] R13: ffff888075d88b60 R14: 0000000000000000 R15: 0000000000000001
[ 1321.950340][    C0]  ? taprio_dequeue_from_txq+0x3c0/0x8d0
[ 1321.950383][    C0]  taprio_dequeue+0x12e/0x5f0
[ 1321.950415][    C0]  ? lock_sync+0x190/0x190
[ 1321.950453][    C0]  __qdisc_run+0x1c4/0x19d0
[ 1321.950513][    C0]  ? mark_held_locks+0x9f/0xe0
[ 1321.950554][    C0]  net_tx_action+0x71e/0xc80
[ 1321.950594][    C0]  __do_softirq+0x218/0x965
[ 1321.950644][    C0]  ? __lock_text_end+0x5/0x5
[ 1321.950688][    C0]  ? irqtime_account_irq+0x185/0x2d0
[ 1321.950737][    C0]  ? taprio_change+0x2be4/0x3890
[ 1321.950770][    C0]  do_softirq+0xaa/0xe0
[ 1321.950813][    C0]  </IRQ>
[ 1321.950821][    C0]  <TASK>
[ 1321.950830][    C0]  __local_bh_enable_ip+0xf8/0x120
[ 1321.950859][    C0]  taprio_change+0x2be4/0x3890
[ 1321.950899][    C0]  ? ref_tracker_alloc+0x2ef/0x5a0
[ 1321.950955][    C0]  ? ref_tracker_free+0x810/0x810
[ 1321.950992][    C0]  ? qdisc_alloc+0x789/0xa90
[ 1321.951043][    C0]  ? qdisc_create_dflt+0x73/0x3e0
[ 1321.951078][    C0]  ? taprio_find+0x140/0x140
[ 1321.951109][    C0]  ? find_held_lock+0x2d/0x110
[ 1321.951161][    C0]  taprio_init+0x6c4/0x950
[ 1321.951195][    C0]  ? taprio_change+0x3890/0x3890
[ 1321.951228][    C0]  ? taprio_change+0x3890/0x3890
[ 1321.951259][    C0]  qdisc_create+0x4f7/0x10a0
[ 1321.951302][    C0]  ? tc_get_qdisc+0xc20/0xc20
[ 1321.951347][    C0]  tc_modify_qdisc+0x4a4/0x1bf0
[ 1321.951394][    C0]  ? qdisc_create+0x10a0/0x10a0
[ 1321.951448][    C0]  ? qdisc_create+0x10a0/0x10a0
[ 1321.951489][    C0]  rtnetlink_rcv_msg+0x439/0xd30
[ 1321.951550][    C0]  ? rtnl_getlink+0xb40/0xb40
[ 1321.951586][    C0]  ? netdev_core_pick_tx+0x390/0x390
[ 1321.951621][    C0]  netlink_rcv_skb+0x16b/0x440
[ 1321.951678][    C0]  ? rtnl_getlink+0xb40/0xb40
[ 1321.951710][    C0]  ? netlink_ack+0x1370/0x1370
[ 1321.951756][    C0]  ? netlink_deliver_tap+0x1b1/0xd00
[ 1321.951796][    C0]  netlink_unicast+0x539/0x800
[ 1321.951835][    C0]  ? netlink_attachskb+0x880/0x880
[ 1321.951871][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1321.951916][    C0]  ? __phys_addr_symbol+0x30/0x70
[ 1321.951950][    C0]  ? __check_object_size+0x323/0x740
[ 1321.951993][    C0]  netlink_sendmsg+0x93c/0xe30
[ 1321.952033][    C0]  ? netlink_unicast+0x800/0x800
[ 1321.952068][    C0]  ? __might_fault+0xe5/0x190
[ 1321.952119][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1321.952166][    C0]  ? netlink_unicast+0x800/0x800
[ 1321.952202][    C0]  sock_sendmsg+0xd9/0x180
[ 1321.952254][    C0]  ____sys_sendmsg+0x6ac/0x940
[ 1321.952287][    C0]  ? kernel_sendmsg+0x50/0x50
[ 1321.952317][    C0]  ? get_compat_msghdr+0x11b/0x170
[ 1321.952386][    C0]  ___sys_sendmsg+0x135/0x1d0
[ 1321.952425][    C0]  ? do_recvmmsg+0x740/0x740
[ 1321.952478][    C0]  ? __fget_light+0xe6/0x260
[ 1321.952520][    C0]  __sys_sendmsg+0x117/0x1e0
[ 1321.952556][    C0]  ? __sys_sendmsg_sock+0x30/0x30
[ 1321.952592][    C0]  ? xfd_validate_state+0x5d/0x180
[ 1321.952649][    C0]  __do_fast_syscall_32+0x61/0xe0
[ 1321.952677][    C0]  do_fast_syscall_32+0x33/0x70
[ 1321.952705][    C0]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 1321.952740][    C0] RIP: 0023:0xf7fe8579
[ 1321.952762][    C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1321.952790][    C0] RSP: 002b:00000000f7fe35ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1321.952815][    C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200007c0
[ 1321.952834][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1321.952851][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1321.952868][    C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1321.952886][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1321.952911][    C0]  </TASK>