Warning: Permanently added '10.128.15.210' (ECDSA) to the list of known hosts.
2021/05/09 07:53:15 fuzzer started
2021/05/09 07:53:16 dialing manager at 10.128.0.169:43701
2021/05/09 07:53:25 syscalls: 3292
2021/05/09 07:53:25 code coverage: enabled
2021/05/09 07:53:25 comparison tracing: enabled
2021/05/09 07:53:25 extra coverage: enabled
2021/05/09 07:53:25 setuid sandbox: enabled
2021/05/09 07:53:25 namespace sandbox: enabled
2021/05/09 07:53:25 Android sandbox: /sys/fs/selinux/policy does not exist
2021/05/09 07:53:25 fault injection: enabled
2021/05/09 07:53:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/05/09 07:53:25 net packet injection: enabled
2021/05/09 07:53:25 net device setup: enabled
2021/05/09 07:53:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/05/09 07:53:25 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/05/09 07:53:25 USB emulation: enabled
2021/05/09 07:53:25 hci packet injection: enabled
2021/05/09 07:53:25 wifi device emulation: enabled
2021/05/09 07:53:25 802.15.4 emulation: enabled
2021/05/09 07:53:25 fetching corpus: 0, signal 0/2000 (executing program)
2021/05/09 07:53:25 fetching corpus: 50, signal 42780/46625 (executing program)
2021/05/09 07:53:25 fetching corpus: 100, signal 69932/75543 (executing program)
2021/05/09 07:53:25 fetching corpus: 150, signal 101133/108401 (executing program)
2021/05/09 07:53:25 fetching corpus: 200, signal 114912/123863 (executing program)
2021/05/09 07:53:26 fetching corpus: 250, signal 128334/138946 (executing program)
2021/05/09 07:53:26 fetching corpus: 300, signal 137575/149851 (executing program)
2021/05/09 07:53:26 fetching corpus: 350, signal 148410/162313 (executing program)
2021/05/09 07:53:26 fetching corpus: 400, signal 161354/176807 (executing program)
2021/05/09 07:53:26 fetching corpus: 450, signal 169291/186291 (executing program)
2021/05/09 07:53:26 fetching corpus: 500, signal 186169/204535 (executing program)
2021/05/09 07:53:26 fetching corpus: 550, signal 193085/212977 (executing program)
2021/05/09 07:53:26 fetching corpus: 600, signal 202324/223690 (executing program)
2021/05/09 07:53:26 fetching corpus: 650, signal 214674/237403 (executing program)
2021/05/09 07:53:26 fetching corpus: 700, signal 227650/251663 (executing program)
2021/05/09 07:53:26 fetching corpus: 750, signal 234930/260314 (executing program)
2021/05/09 07:53:27 fetching corpus: 800, signal 242767/269509 (executing program)
2021/05/09 07:53:27 fetching corpus: 850, signal 249167/277252 (executing program)
2021/05/09 07:53:27 fetching corpus: 900, signal 254506/283953 (executing program)
2021/05/09 07:53:27 fetching corpus: 950, signal 264348/294978 (executing program)
2021/05/09 07:53:27 fetching corpus: 1000, signal 272504/304400 (executing program)
2021/05/09 07:53:27 fetching corpus: 1050, signal 278984/312167 (executing program)
2021/05/09 07:53:27 fetching corpus: 1100, signal 283214/317707 (executing program)
2021/05/09 07:53:27 fetching corpus: 1150, signal 287617/323435 (executing program)
2021/05/09 07:53:27 fetching corpus: 1200, signal 293073/330116 (executing program)
2021/05/09 07:53:27 fetching corpus: 1250, signal 297699/336038 (executing program)
2021/05/09 07:53:28 fetching corpus: 1300, signal 300907/340531 (executing program)
2021/05/09 07:53:28 fetching corpus: 1350, signal 307562/348270 (executing program)
2021/05/09 07:53:28 fetching corpus: 1400, signal 310031/352071 (executing program)
2021/05/09 07:53:28 fetching corpus: 1450, signal 315479/358636 (executing program)
2021/05/09 07:53:28 fetching corpus: 1500, signal 318806/363255 (executing program)
2021/05/09 07:53:28 fetching corpus: 1550, signal 324815/370367 (executing program)
2021/05/09 07:53:28 fetching corpus: 1600, signal 329573/376302 (executing program)
2021/05/09 07:53:28 fetching corpus: 1650, signal 336207/383982 (executing program)
2021/05/09 07:53:28 fetching corpus: 1700, signal 340517/389386 (executing program)
2021/05/09 07:53:28 fetching corpus: 1750, signal 343735/393769 (executing program)
2021/05/09 07:53:28 fetching corpus: 1800, signal 349649/400723 (executing program)
2021/05/09 07:53:29 fetching corpus: 1850, signal 354623/406716 (executing program)
2021/05/09 07:53:29 fetching corpus: 1900, signal 359330/412432 (executing program)
2021/05/09 07:53:29 fetching corpus: 1950, signal 362723/416922 (executing program)
2021/05/09 07:53:29 fetching corpus: 2000, signal 366326/421605 (executing program)
2021/05/09 07:53:29 fetching corpus: 2050, signal 369147/425545 (executing program)
2021/05/09 07:53:29 fetching corpus: 2100, signal 375198/432419 (executing program)
2021/05/09 07:53:29 fetching corpus: 2150, signal 379779/437962 (executing program)
2021/05/09 07:53:29 fetching corpus: 2200, signal 382527/441777 (executing program)
2021/05/09 07:53:29 fetching corpus: 2250, signal 385698/445993 (executing program)
2021/05/09 07:53:30 fetching corpus: 2300, signal 390431/451672 (executing program)
2021/05/09 07:53:30 fetching corpus: 2350, signal 393260/455498 (executing program)
2021/05/09 07:53:30 fetching corpus: 2400, signal 397096/460276 (executing program)
2021/05/09 07:53:30 fetching corpus: 2450, signal 400366/464582 (executing program)
2021/05/09 07:53:30 fetching corpus: 2500, signal 403314/468575 (executing program)
2021/05/09 07:53:30 fetching corpus: 2550, signal 407465/473596 (executing program)
2021/05/09 07:53:30 fetching corpus: 2600, signal 410478/477594 (executing program)
2021/05/09 07:53:30 fetching corpus: 2650, signal 414788/482772 (executing program)
2021/05/09 07:53:30 fetching corpus: 2700, signal 417954/486898 (executing program)
2021/05/09 07:53:30 fetching corpus: 2750, signal 421507/491362 (executing program)
2021/05/09 07:53:31 fetching corpus: 2800, signal 423607/494509 (executing program)
2021/05/09 07:53:31 fetching corpus: 2850, signal 426865/498654 (executing program)
2021/05/09 07:53:31 fetching corpus: 2900, signal 428964/501779 (executing program)
2021/05/09 07:53:31 fetching corpus: 2950, signal 432636/506314 (executing program)
2021/05/09 07:53:31 fetching corpus: 3000, signal 436092/510573 (executing program)
2021/05/09 07:53:31 fetching corpus: 3050, signal 439073/514474 (executing program)
2021/05/09 07:53:31 fetching corpus: 3100, signal 441653/517978 (executing program)
2021/05/09 07:53:31 fetching corpus: 3150, signal 443444/520825 (executing program)
2021/05/09 07:53:31 fetching corpus: 3200, signal 445639/523985 (executing program)
2021/05/09 07:53:31 fetching corpus: 3250, signal 447806/527124 (executing program)
2021/05/09 07:53:32 fetching corpus: 3300, signal 449347/529672 (executing program)
2021/05/09 07:53:32 fetching corpus: 3350, signal 451714/532944 (executing program)
2021/05/09 07:53:32 fetching corpus: 3400, signal 453884/535994 (executing program)
2021/05/09 07:53:32 fetching corpus: 3450, signal 455333/538436 (executing program)
2021/05/09 07:53:32 fetching corpus: 3500, signal 458072/542003 (executing program)
2021/05/09 07:53:32 fetching corpus: 3550, signal 460073/544982 (executing program)
2021/05/09 07:53:32 fetching corpus: 3600, signal 462445/548216 (executing program)
2021/05/09 07:53:32 fetching corpus: 3650, signal 465267/551880 (executing program)
2021/05/09 07:53:32 fetching corpus: 3700, signal 468098/555491 (executing program)
2021/05/09 07:53:33 fetching corpus: 3750, signal 471008/559156 (executing program)
2021/05/09 07:53:33 fetching corpus: 3800, signal 473477/562451 (executing program)
2021/05/09 07:53:33 fetching corpus: 3850, signal 475608/565404 (executing program)
2021/05/09 07:53:33 fetching corpus: 3900, signal 478187/568777 (executing program)
2021/05/09 07:53:33 fetching corpus: 3950, signal 480215/571673 (executing program)
2021/05/09 07:53:33 fetching corpus: 4000, signal 482134/574498 (executing program)
2021/05/09 07:53:33 fetching corpus: 4050, signal 484143/577335 (executing program)
2021/05/09 07:53:33 fetching corpus: 4100, signal 485497/579658 (executing program)
2021/05/09 07:53:33 fetching corpus: 4150, signal 488277/583101 (executing program)
2021/05/09 07:53:33 fetching corpus: 4200, signal 490491/586070 (executing program)
2021/05/09 07:53:33 fetching corpus: 4250, signal 493980/590129 (executing program)
2021/05/09 07:53:34 fetching corpus: 4300, signal 495855/592841 (executing program)
2021/05/09 07:53:34 fetching corpus: 4350, signal 500111/597563 (executing program)
2021/05/09 07:53:34 fetching corpus: 4400, signal 501878/600148 (executing program)
2021/05/09 07:53:34 fetching corpus: 4450, signal 503406/602560 (executing program)
2021/05/09 07:53:34 fetching corpus: 4500, signal 506617/606337 (executing program)
2021/05/09 07:53:34 fetching corpus: 4550, signal 508381/608912 (executing program)
2021/05/09 07:53:34 fetching corpus: 4600, signal 510117/611481 (executing program)
2021/05/09 07:53:34 fetching corpus: 4650, signal 511606/613774 (executing program)
2021/05/09 07:53:34 fetching corpus: 4700, signal 513068/616063 (executing program)
2021/05/09 07:53:34 fetching corpus: 4750, signal 515061/618785 (executing program)
2021/05/09 07:53:35 fetching corpus: 4800, signal 516874/621351 (executing program)
2021/05/09 07:53:35 fetching corpus: 4850, signal 519006/624181 (executing program)
2021/05/09 07:53:35 fetching corpus: 4900, signal 520539/626521 (executing program)
2021/05/09 07:53:35 fetching corpus: 4950, signal 523246/629833 (executing program)
2021/05/09 07:53:35 fetching corpus: 5000, signal 525226/632462 (executing program)
2021/05/09 07:53:35 fetching corpus: 5050, signal 527727/635625 (executing program)
2021/05/09 07:53:35 fetching corpus: 5100, signal 529333/638000 (executing program)
2021/05/09 07:53:35 fetching corpus: 5150, signal 532586/641681 (executing program)
2021/05/09 07:53:35 fetching corpus: 5200, signal 535352/644966 (executing program)
2021/05/09 07:53:36 fetching corpus: 5250, signal 537406/647652 (executing program)
2021/05/09 07:53:36 fetching corpus: 5300, signal 539618/650435 (executing program)
2021/05/09 07:53:36 fetching corpus: 5350, signal 541478/652954 (executing program)
2021/05/09 07:53:36 fetching corpus: 5400, signal 542693/654968 (executing program)
2021/05/09 07:53:36 fetching corpus: 5450, signal 543784/656899 (executing program)
2021/05/09 07:53:36 fetching corpus: 5500, signal 546035/659707 (executing program)
2021/05/09 07:53:36 fetching corpus: 5550, signal 548348/662569 (executing program)
2021/05/09 07:53:36 fetching corpus: 5600, signal 550132/664930 (executing program)
2021/05/09 07:53:36 fetching corpus: 5650, signal 551080/666725 (executing program)
2021/05/09 07:53:37 fetching corpus: 5700, signal 553878/669997 (executing program)
2021/05/09 07:53:37 fetching corpus: 5750, signal 556647/673192 (executing program)
2021/05/09 07:53:37 fetching corpus: 5800, signal 558916/675989 (executing program)
2021/05/09 07:53:37 fetching corpus: 5850, signal 560512/678217 (executing program)
2021/05/09 07:53:37 fetching corpus: 5900, signal 562167/680526 (executing program)
2021/05/09 07:53:37 fetching corpus: 5950, signal 563347/682480 (executing program)
2021/05/09 07:53:37 fetching corpus: 6000, signal 564974/684764 (executing program)
2021/05/09 07:53:37 fetching corpus: 6050, signal 566724/687125 (executing program)
2021/05/09 07:53:37 fetching corpus: 6100, signal 568950/689898 (executing program)
2021/05/09 07:53:37 fetching corpus: 6150, signal 571207/692629 (executing program)
2021/05/09 07:53:37 fetching corpus: 6200, signal 572327/694463 (executing program)
2021/05/09 07:53:38 fetching corpus: 6250, signal 573807/696604 (executing program)
2021/05/09 07:53:38 fetching corpus: 6300, signal 575698/699004 (executing program)
2021/05/09 07:53:38 fetching corpus: 6350, signal 577834/701605 (executing program)
2021/05/09 07:53:38 fetching corpus: 6400, signal 579725/704089 (executing program)
2021/05/09 07:53:38 fetching corpus: 6450, signal 582044/706855 (executing program)
2021/05/09 07:53:38 fetching corpus: 6500, signal 582945/708487 (executing program)
2021/05/09 07:53:38 fetching corpus: 6550, signal 584930/710937 (executing program)
2021/05/09 07:53:38 fetching corpus: 6600, signal 586236/712901 (executing program)
2021/05/09 07:53:38 fetching corpus: 6650, signal 587891/715098 (executing program)
2021/05/09 07:53:38 fetching corpus: 6700, signal 589406/717198 (executing program)
2021/05/09 07:53:39 fetching corpus: 6750, signal 591761/719921 (executing program)
2021/05/09 07:53:39 fetching corpus: 6800, signal 593255/721976 (executing program)
2021/05/09 07:53:39 fetching corpus: 6850, signal 594706/724006 (executing program)
2021/05/09 07:53:39 fetching corpus: 6900, signal 596164/726048 (executing program)
2021/05/09 07:53:39 fetching corpus: 6950, signal 597836/728212 (executing program)
2021/05/09 07:53:39 fetching corpus: 7000, signal 599382/730279 (executing program)
2021/05/09 07:53:39 fetching corpus: 7050, signal 600880/732274 (executing program)
2021/05/09 07:53:39 fetching corpus: 7100, signal 602678/734557 (executing program)
2021/05/09 07:53:39 fetching corpus: 7150, signal 603674/736213 (executing program)
2021/05/09 07:53:40 fetching corpus: 7200, signal 605560/738519 (executing program)
2021/05/09 07:53:40 fetching corpus: 7250, signal 606999/740438 (executing program)
2021/05/09 07:53:40 fetching corpus: 7300, signal 608487/742395 (executing program)
2021/05/09 07:53:40 fetching corpus: 7350, signal 609674/744150 (executing program)
2021/05/09 07:53:40 fetching corpus: 7400, signal 610717/745804 (executing program)
2021/05/09 07:53:40 fetching corpus: 7450, signal 611977/747686 (executing program)
2021/05/09 07:53:40 fetching corpus: 7500, signal 613239/749496 (executing program)
2021/05/09 07:53:40 fetching corpus: 7550, signal 615254/751865 (executing program)
2021/05/09 07:53:40 fetching corpus: 7600, signal 616698/753804 (executing program)
2021/05/09 07:53:40 fetching corpus: 7650, signal 617851/755561 (executing program)
2021/05/09 07:53:40 fetching corpus: 7700, signal 619215/757452 (executing program)
2021/05/09 07:53:41 fetching corpus: 7750, signal 620899/759555 (executing program)
2021/05/09 07:53:41 fetching corpus: 7800, signal 621707/761046 (executing program)
2021/05/09 07:53:41 fetching corpus: 7850, signal 622493/762481 (executing program)
2021/05/09 07:53:41 fetching corpus: 7900, signal 623621/764173 (executing program)
2021/05/09 07:53:41 fetching corpus: 7950, signal 625576/766453 (executing program)
2021/05/09 07:53:41 fetching corpus: 8000, signal 626858/768188 (executing program)
2021/05/09 07:53:41 fetching corpus: 8050, signal 628412/770200 (executing program)
2021/05/09 07:53:41 fetching corpus: 8100, signal 629470/771843 (executing program)
2021/05/09 07:53:41 fetching corpus: 8150, signal 630456/773385 (executing program)
2021/05/09 07:53:41 fetching corpus: 8200, signal 631763/775209 (executing program)
2021/05/09 07:53:42 fetching corpus: 8250, signal 632837/776841 (executing program)
2021/05/09 07:53:42 fetching corpus: 8300, signal 633844/778423 (executing program)
2021/05/09 07:53:42 fetching corpus: 8350, signal 634707/779932 (executing program)
2021/05/09 07:53:42 fetching corpus: 8400, signal 635817/781586 (executing program)
2021/05/09 07:53:42 fetching corpus: 8450, signal 637039/783285 (executing program)
2021/05/09 07:53:42 fetching corpus: 8500, signal 638232/784946 (executing program)
2021/05/09 07:53:42 fetching corpus: 8550, signal 639414/786640 (executing program)
2021/05/09 07:53:42 fetching corpus: 8600, signal 640637/788383 (executing program)
2021/05/09 07:53:42 fetching corpus: 8650, signal 641579/789891 (executing program)
2021/05/09 07:53:42 fetching corpus: 8700, signal 642896/791663 (executing program)
2021/05/09 07:53:42 fetching corpus: 8750, signal 644789/793747 (executing program)
2021/05/09 07:53:43 fetching corpus: 8800, signal 645922/795385 (executing program)
2021/05/09 07:53:43 fetching corpus: 8850, signal 646872/796871 (executing program)
2021/05/09 07:53:43 fetching corpus: 8900, signal 647724/798315 (executing program)
2021/05/09 07:53:43 fetching corpus: 8950, signal 650132/800775 (executing program)
2021/05/09 07:53:43 fetching corpus: 9000, signal 651679/802631 (executing program)
2021/05/09 07:53:43 fetching corpus: 9050, signal 652462/804000 (executing program)
2021/05/09 07:53:43 fetching corpus: 9100, signal 654260/806025 (executing program)
2021/05/09 07:53:43 fetching corpus: 9150, signal 655835/807920 (executing program)
2021/05/09 07:53:43 fetching corpus: 9200, signal 656602/809253 (executing program)
2021/05/09 07:53:44 fetching corpus: 9250, signal 657603/810785 (executing program)
2021/05/09 07:53:44 fetching corpus: 9300, signal 658625/812271 (executing program)
2021/05/09 07:53:44 fetching corpus: 9350, signal 659435/813634 (executing program)
2021/05/09 07:53:44 fetching corpus: 9400, signal 660204/814990 (executing program)
2021/05/09 07:53:44 fetching corpus: 9450, signal 661302/816586 (executing program)
2021/05/09 07:53:44 fetching corpus: 9500, signal 662219/818002 (executing program)
2021/05/09 07:53:44 fetching corpus: 9550, signal 663207/819491 (executing program)
2021/05/09 07:53:44 fetching corpus: 9600, signal 664272/821007 (executing program)
2021/05/09 07:53:44 fetching corpus: 9650, signal 664812/822132 (executing program)
2021/05/09 07:53:44 fetching corpus: 9700, signal 666138/823787 (executing program)
2021/05/09 07:53:44 fetching corpus: 9750, signal 667641/825551 (executing program)
2021/05/09 07:53:45 fetching corpus: 9800, signal 668524/826964 (executing program)
2021/05/09 07:53:45 fetching corpus: 9850, signal 669273/828237 (executing program)
2021/05/09 07:53:45 fetching corpus: 9900, signal 670577/829854 (executing program)
2021/05/09 07:53:45 fetching corpus: 9950, signal 671383/831154 (executing program)
2021/05/09 07:53:45 fetching corpus: 10000, signal 672468/832613 (executing program)
2021/05/09 07:53:45 fetching corpus: 10050, signal 673422/833984 (executing program)
2021/05/09 07:53:45 fetching corpus: 10100, signal 674175/835293 (executing program)
2021/05/09 07:53:45 fetching corpus: 10150, signal 675357/836853 (executing program)
2021/05/09 07:53:45 fetching corpus: 10200, signal 676017/838085 (executing program)
2021/05/09 07:53:45 fetching corpus: 10250, signal 677167/839602 (executing program)
2021/05/09 07:53:45 fetching corpus: 10300, signal 677889/840857 (executing program)
2021/05/09 07:53:46 fetching corpus: 10350, signal 680781/843435 (executing program)
2021/05/09 07:53:46 fetching corpus: 10400, signal 681500/844707 (executing program)
2021/05/09 07:53:46 fetching corpus: 10450, signal 682408/846062 (executing program)
2021/05/09 07:53:46 fetching corpus: 10500, signal 683334/847393 (executing program)
2021/05/09 07:53:46 fetching corpus: 10550, signal 684163/848722 (executing program)
2021/05/09 07:53:46 fetching corpus: 10600, signal 685158/850112 (executing program)
2021/05/09 07:53:46 fetching corpus: 10650, signal 686080/851463 (executing program)
2021/05/09 07:53:46 fetching corpus: 10700, signal 687299/852981 (executing program)
2021/05/09 07:53:46 fetching corpus: 10750, signal 688496/854500 (executing program)
2021/05/09 07:53:47 fetching corpus: 10800, signal 690024/856219 (executing program)
2021/05/09 07:53:47 fetching corpus: 10850, signal 690969/857549 (executing program)
2021/05/09 07:53:47 fetching corpus: 10900, signal 691859/858786 (executing program)
2021/05/09 07:53:47 fetching corpus: 10950, signal 693220/860328 (executing program)
2021/05/09 07:53:47 fetching corpus: 11000, signal 694486/861841 (executing program)
2021/05/09 07:53:47 fetching corpus: 11050, signal 697243/864263 (executing program)
2021/05/09 07:53:47 fetching corpus: 11100, signal 698063/865554 (executing program)
2021/05/09 07:53:47 fetching corpus: 11150, signal 699008/866903 (executing program)
2021/05/09 07:53:47 fetching corpus: 11200, signal 699829/868091 (executing program)
2021/05/09 07:53:48 fetching corpus: 11250, signal 701493/869821 (executing program)
2021/05/09 07:53:48 fetching corpus: 11300, signal 702342/871082 (executing program)
2021/05/09 07:53:48 fetching corpus: 11350, signal 703384/872478 (executing program)
2021/05/09 07:53:48 fetching corpus: 11400, signal 704510/873847 (executing program)
2021/05/09 07:53:48 fetching corpus: 11450, signal 705263/875061 (executing program)
2021/05/09 07:53:48 fetching corpus: 11500, signal 706339/876458 (executing program)
2021/05/09 07:53:48 fetching corpus: 11550, signal 706816/877486 (executing program)
2021/05/09 07:53:48 fetching corpus: 11600, signal 707527/878617 (executing program)
2021/05/09 07:53:48 fetching corpus: 11650, signal 708108/879709 (executing program)
2021/05/09 07:53:48 fetching corpus: 11700, signal 708723/880781 (executing program)
2021/05/09 07:53:49 fetching corpus: 11750, signal 709429/881929 (executing program)
2021/05/09 07:53:49 fetching corpus: 11800, signal 710175/883093 (executing program)
2021/05/09 07:53:49 fetching corpus: 11850, signal 711270/884463 (executing program)
2021/05/09 07:53:49 fetching corpus: 11900, signal 712582/885939 (executing program)
2021/05/09 07:53:49 fetching corpus: 11950, signal 713690/887316 (executing program)
2021/05/09 07:53:49 fetching corpus: 12000, signal 714802/888689 (executing program)
2021/05/09 07:53:49 fetching corpus: 12050, signal 715790/889965 (executing program)
2021/05/09 07:53:49 fetching corpus: 12100, signal 716498/891074 (executing program)
2021/05/09 07:53:49 fetching corpus: 12150, signal 717301/892262 (executing program)
2021/05/09 07:53:49 fetching corpus: 12200, signal 718321/893493 (executing program)
2021/05/09 07:53:50 fetching corpus: 12250, signal 719678/894958 (executing program)
2021/05/09 07:53:50 fetching corpus: 12300, signal 724414/898242 (executing program)
2021/05/09 07:53:50 fetching corpus: 12350, signal 725416/899533 (executing program)
2021/05/09 07:53:50 fetching corpus: 12400, signal 726217/900646 (executing program)
2021/05/09 07:53:50 fetching corpus: 12450, signal 727696/902117 (executing program)
2021/05/09 07:53:50 fetching corpus: 12500, signal 728248/903091 (executing program)
2021/05/09 07:53:50 fetching corpus: 12550, signal 729907/904742 (executing program)
2021/05/09 07:53:50 fetching corpus: 12600, signal 730575/905782 (executing program)
2021/05/09 07:53:50 fetching corpus: 12650, signal 731416/906962 (executing program)
2021/05/09 07:53:51 fetching corpus: 12700, signal 732050/907991 (executing program)
2021/05/09 07:53:51 fetching corpus: 12750, signal 732879/909139 (executing program)
2021/05/09 07:53:51 fetching corpus: 12800, signal 733798/910329 (executing program)
2021/05/09 07:53:51 fetching corpus: 12850, signal 734734/911482 (executing program)
2021/05/09 07:53:51 fetching corpus: 12900, signal 735827/912788 (executing program)
2021/05/09 07:53:51 fetching corpus: 12950, signal 736558/913888 (executing program)
2021/05/09 07:53:51 fetching corpus: 13000, signal 737077/914828 (executing program)
2021/05/09 07:53:51 fetching corpus: 13050, signal 737730/915897 (executing program)
2021/05/09 07:53:51 fetching corpus: 13100, signal 738344/916864 (executing program)
2021/05/09 07:53:52 fetching corpus: 13150, signal 739095/917935 (executing program)
2021/05/09 07:53:52 fetching corpus: 13200, signal 740326/919295 (executing program)
2021/05/09 07:53:52 fetching corpus: 13250, signal 740978/920312 (executing program)
2021/05/09 07:53:52 fetching corpus: 13300, signal 741469/921265 (executing program)
2021/05/09 07:53:52 fetching corpus: 13350, signal 741974/922219 (executing program)
2021/05/09 07:53:52 fetching corpus: 13400, signal 742763/923295 (executing program)
2021/05/09 07:53:52 fetching corpus: 13450, signal 743612/924409 (executing program)
2021/05/09 07:53:52 fetching corpus: 13500, signal 744403/925512 (executing program)
2021/05/09 07:53:52 fetching corpus: 13550, signal 745637/926814 (executing program)
2021/05/09 07:53:52 fetching corpus: 13600, signal 746116/927750 (executing program)
2021/05/09 07:53:53 fetching corpus: 13650, signal 746739/928754 (executing program)
2021/05/09 07:53:53 fetching corpus: 13700, signal 747422/929798 (executing program)
2021/05/09 07:53:53 fetching corpus: 13750, signal 748231/930875 (executing program)
2021/05/09 07:53:53 fetching corpus: 13800, signal 748733/931776 (executing program)
2021/05/09 07:53:53 fetching corpus: 13850, signal 749453/932803 (executing program)
2021/05/09 07:53:53 fetching corpus: 13900, signal 750045/933782 (executing program)
2021/05/09 07:53:53 fetching corpus: 13950, signal 751034/934935 (executing program)
2021/05/09 07:53:53 fetching corpus: 14000, signal 751799/936002 (executing program)
2021/05/09 07:53:53 fetching corpus: 14050, signal 752433/936988 (executing program)
2021/05/09 07:53:54 fetching corpus: 14100, signal 753105/937997 (executing program)
2021/05/09 07:53:54 fetching corpus: 14150, signal 753866/939040 (executing program)
2021/05/09 07:53:54 fetching corpus: 14200, signal 754504/940009 (executing program)
2021/05/09 07:53:54 fetching corpus: 14250, signal 755146/940971 (executing program)
2021/05/09 07:53:54 fetching corpus: 14300, signal 755703/941898 (executing program)
2021/05/09 07:53:54 fetching corpus: 14350, signal 756417/942853 (executing program)
2021/05/09 07:53:54 fetching corpus: 14400, signal 758042/944292 (executing program)
2021/05/09 07:53:54 fetching corpus: 14450, signal 758651/945241 (executing program)
2021/05/09 07:53:54 fetching corpus: 14500, signal 759228/946191 (executing program)
2021/05/09 07:53:54 fetching corpus: 14550, signal 759899/947126 (executing program)
2021/05/09 07:53:55 fetching corpus: 14600, signal 761117/948416 (executing program)
2021/05/09 07:53:55 fetching corpus: 14650, signal 761981/949417 (executing program)
2021/05/09 07:53:55 fetching corpus: 14700, signal 762794/950450 (executing program)
2021/05/09 07:53:55 fetching corpus: 14750, signal 763384/951371 (executing program)
2021/05/09 07:53:55 fetching corpus: 14800, signal 763874/952206 (executing program)
2021/05/09 07:53:55 fetching corpus: 14850, signal 764863/953327 (executing program)
2021/05/09 07:53:55 fetching corpus: 14900, signal 765464/954268 (executing program)
2021/05/09 07:53:55 fetching corpus: 14950, signal 766018/955171 (executing program)
2021/05/09 07:53:55 fetching corpus: 15000, signal 766815/956190 (executing program)
2021/05/09 07:53:55 fetching corpus: 15050, signal 767661/957214 (executing program)
2021/05/09 07:53:55 fetching corpus: 15100, signal 768437/958180 (executing program)
2021/05/09 07:53:56 fetching corpus: 15150, signal 768955/959050 (executing program)
2021/05/09 07:53:56 fetching corpus: 15200, signal 769722/960009 (executing program)
2021/05/09 07:53:56 fetching corpus: 15250, signal 770453/960964 (executing program)
2021/05/09 07:53:56 fetching corpus: 15300, signal 771926/962196 (executing program)
2021/05/09 07:53:56 fetching corpus: 15350, signal 772421/963037 (executing program)
2021/05/09 07:53:56 fetching corpus: 15400, signal 773510/964131 (executing program)
2021/05/09 07:53:56 fetching corpus: 15450, signal 774291/965104 (executing program)
2021/05/09 07:53:56 fetching corpus: 15500, signal 775018/965986 (executing program)
2021/05/09 07:53:56 fetching corpus: 15550, signal 776685/967313 (executing program)
2021/05/09 07:53:56 fetching corpus: 15600, signal 777332/968203 (executing program)
2021/05/09 07:53:57 fetching corpus: 15650, signal 778420/969251 (executing program)
2021/05/09 07:53:57 fetching corpus: 15700, signal 779099/970111 (executing program)
2021/05/09 07:53:57 fetching corpus: 15750, signal 779721/970914 (executing program)
2021/05/09 07:53:57 fetching corpus: 15800, signal 780304/971773 (executing program)
2021/05/09 07:53:57 fetching corpus: 15850, signal 780985/972634 (executing program)
2021/05/09 07:53:57 fetching corpus: 15900, signal 781423/973435 (executing program)
2021/05/09 07:53:57 fetching corpus: 15950, signal 782102/974368 (executing program)
2021/05/09 07:53:57 fetching corpus: 16000, signal 782931/975322 (executing program)
2021/05/09 07:53:57 fetching corpus: 16050, signal 783679/976217 (executing program)
2021/05/09 07:53:57 fetching corpus: 16100, signal 784122/977001 (executing program)
2021/05/09 07:53:58 fetching corpus: 16150, signal 784667/977845 (executing program)
2021/05/09 07:53:58 fetching corpus: 16200, signal 785983/978979 (executing program)
2021/05/09 07:53:58 fetching corpus: 16250, signal 786618/979845 (executing program)
2021/05/09 07:53:58 fetching corpus: 16300, signal 787080/980642 (executing program)
2021/05/09 07:53:58 fetching corpus: 16350, signal 787762/981516 (executing program)
2021/05/09 07:53:58 fetching corpus: 16400, signal 788213/982289 (executing program)
2021/05/09 07:53:58 fetching corpus: 16450, signal 788956/983162 (executing program)
2021/05/09 07:53:58 fetching corpus: 16500, signal 789621/984000 (executing program)
2021/05/09 07:53:58 fetching corpus: 16550, signal 790028/984736 (executing program)
2021/05/09 07:53:58 fetching corpus: 16600, signal 790862/985651 (executing program)
2021/05/09 07:53:59 fetching corpus: 16650, signal 791717/986545 (executing program)
2021/05/09 07:53:59 fetching corpus: 16700, signal 792026/987275 (executing program)
2021/05/09 07:53:59 fetching corpus: 16750, signal 792548/988094 (executing program)
2021/05/09 07:53:59 fetching corpus: 16800, signal 793121/988885 (executing program)
2021/05/09 07:53:59 fetching corpus: 16850, signal 793829/989741 (executing program)
2021/05/09 07:53:59 fetching corpus: 16900, signal 794370/990546 (executing program)
2021/05/09 07:53:59 fetching corpus: 16950, signal 795139/991424 (executing program)
2021/05/09 07:53:59 fetching corpus: 17000, signal 795618/992168 (executing program)
2021/05/09 07:53:59 fetching corpus: 17050, signal 796402/993059 (executing program)
2021/05/09 07:54:00 fetching corpus: 17100, signal 797368/994021 (executing program)
2021/05/09 07:54:00 fetching corpus: 17150, signal 798254/994904 (executing program)
2021/05/09 07:54:00 fetching corpus: 17200, signal 798664/995664 (executing program)
2021/05/09 07:54:00 fetching corpus: 17250, signal 799331/996493 (executing program)
2021/05/09 07:54:00 fetching corpus: 17300, signal 800126/997360 (executing program)
2021/05/09 07:54:00 fetching corpus: 17350, signal 800711/998151 (executing program)
2021/05/09 07:54:00 fetching corpus: 17400, signal 801432/999013 (executing program)
2021/05/09 07:54:00 fetching corpus: 17450, signal 803581/1000375 (executing program)
2021/05/09 07:54:00 fetching corpus: 17500, signal 804477/1001263 (executing program)
2021/05/09 07:54:00 fetching corpus: 17550, signal 805205/1002069 (executing program)
2021/05/09 07:54:01 fetching corpus: 17600, signal 805615/1002797 (executing program)
2021/05/09 07:54:01 fetching corpus: 17650, signal 806302/1003597 (executing program)
2021/05/09 07:54:01 fetching corpus: 17700, signal 807234/1004500 (executing program)
2021/05/09 07:54:01 fetching corpus: 17750, signal 808271/1005435 (executing program)
2021/05/09 07:54:01 fetching corpus: 17800, signal 809012/1006268 (executing program)
2021/05/09 07:54:01 fetching corpus: 17850, signal 809414/1007008 (executing program)
2021/05/09 07:54:01 fetching corpus: 17900, signal 809794/1007674 (executing program)
2021/05/09 07:54:01 fetching corpus: 17950, signal 810297/1008376 (executing program)
2021/05/09 07:54:01 fetching corpus: 18000, signal 810701/1009109 (executing program)
2021/05/09 07:54:01 fetching corpus: 18050, signal 811394/1009905 (executing program)
2021/05/09 07:54:02 fetching corpus: 18100, signal 812098/1010675 (executing program)
2021/05/09 07:54:02 fetching corpus: 18150, signal 812968/1011554 (executing program)
2021/05/09 07:54:02 fetching corpus: 18200, signal 813556/1012271 (executing program)
2021/05/09 07:54:02 fetching corpus: 18250, signal 814065/1013009 (executing program)
2021/05/09 07:54:02 fetching corpus: 18300, signal 814515/1013700 (executing program)
2021/05/09 07:54:02 fetching corpus: 18350, signal 815252/1014498 (executing program)
2021/05/09 07:54:02 fetching corpus: 18400, signal 816135/1015361 (executing program)
2021/05/09 07:54:02 fetching corpus: 18450, signal 816562/1016003 (executing program)
2021/05/09 07:54:02 fetching corpus: 18500, signal 817130/1016725 (executing program)
2021/05/09 07:54:02 fetching corpus: 18550, signal 817842/1017498 (executing program)
2021/05/09 07:54:03 fetching corpus: 18600, signal 818228/1018143 (executing program)
2021/05/09 07:54:03 fetching corpus: 18650, signal 818729/1018876 (executing program)
2021/05/09 07:54:03 fetching corpus: 18700, signal 819304/1019622 (executing program)
2021/05/09 07:54:03 fetching corpus: 18750, signal 820213/1020459 (executing program)
2021/05/09 07:54:03 fetching corpus: 18800, signal 820765/1021183 (executing program)
2021/05/09 07:54:03 fetching corpus: 18850, signal 821579/1022029 (executing program)
2021/05/09 07:54:03 fetching corpus: 18900, signal 822046/1022695 (executing program)
2021/05/09 07:54:03 fetching corpus: 18950, signal 822517/1023368 (executing program)
2021/05/09 07:54:03 fetching corpus: 19000, signal 823222/1024094 (executing program)
2021/05/09 07:54:03 fetching corpus: 19050, signal 824011/1024880 (executing program)
2021/05/09 07:54:04 fetching corpus: 19100, signal 825144/1025772 (executing program)
2021/05/09 07:54:04 fetching corpus: 19150, signal 825653/1026429 (executing program)
2021/05/09 07:54:04 fetching corpus: 19200, signal 826170/1027125 (executing program)
2021/05/09 07:54:04 fetching corpus: 19250, signal 826851/1027878 (executing program)
2021/05/09 07:54:04 fetching corpus: 19300, signal 827551/1028627 (executing program)
2021/05/09 07:54:04 fetching corpus: 19350, signal 828173/1029306 (executing program)
2021/05/09 07:54:04 fetching corpus: 19400, signal 828806/1030003 (executing program)
2021/05/09 07:54:04 fetching corpus: 19450, signal 829483/1030721 (executing program)
2021/05/09 07:54:04 fetching corpus: 19500, signal 830416/1031519 (executing program)
2021/05/09 07:54:05 fetching corpus: 19550, signal 831093/1032217 (executing program)
2021/05/09 07:54:05 fetching corpus: 19600, signal 831595/1032889 (executing program)
2021/05/09 07:54:05 fetching corpus: 19650, signal 832135/1033530 (executing program)
2021/05/09 07:54:05 fetching corpus: 19700, signal 832648/1034203 (executing program)
2021/05/09 07:54:05 fetching corpus: 19750, signal 833922/1035072 (executing program)
2021/05/09 07:54:05 fetching corpus: 19800, signal 834412/1035694 (executing program)
2021/05/09 07:54:05 fetching corpus: 19850, signal 835020/1036335 (executing program)
2021/05/09 07:54:05 fetching corpus: 19900, signal 836015/1037096 (executing program)
2021/05/09 07:54:05 fetching corpus: 19950, signal 836558/1037743 (executing program)
2021/05/09 07:54:05 fetching corpus: 20000, signal 837118/1038392 (executing program)
2021/05/09 07:54:06 fetching corpus: 20050, signal 838022/1039122 (executing program)
2021/05/09 07:54:06 fetching corpus: 20100, signal 838448/1039722 (executing program)
2021/05/09 07:54:06 fetching corpus: 20150, signal 838820/1040357 (executing program)
2021/05/09 07:54:06 fetching corpus: 20200, signal 839450/1041026 (executing program)
2021/05/09 07:54:06 fetching corpus: 20250, signal 839832/1041657 (executing program)
2021/05/09 07:54:06 fetching corpus: 20300, signal 840583/1042346 (executing program)
2021/05/09 07:54:06 fetching corpus: 20350, signal 841172/1043006 (executing program)
2021/05/09 07:54:06 fetching corpus: 20400, signal 841627/1043631 (executing program)
2021/05/09 07:54:06 fetching corpus: 20450, signal 842142/1044254 (executing program)
2021/05/09 07:54:06 fetching corpus: 20500, signal 842670/1044882 (executing program)
2021/05/09 07:54:07 fetching corpus: 20550, signal 843442/1045530 (executing program)
2021/05/09 07:54:07 fetching corpus: 20600, signal 843876/1046100 (executing program)
2021/05/09 07:54:07 fetching corpus: 20650, signal 844659/1046802 (executing program)
2021/05/09 07:54:07 fetching corpus: 20700, signal 845253/1047429 (executing program)
2021/05/09 07:54:07 fetching corpus: 20750, signal 845827/1048071 (executing program)
2021/05/09 07:54:07 fetching corpus: 20800, signal 846419/1048714 (executing program)
2021/05/09 07:54:07 fetching corpus: 20850, signal 846825/1049272 (executing program)
2021/05/09 07:54:07 fetching corpus: 20900, signal 847386/1049924 (executing program)
2021/05/09 07:54:07 fetching corpus: 20950, signal 847679/1050524 (executing program)
2021/05/09 07:54:07 fetching corpus: 21000, signal 848182/1051148 (executing program)
2021/05/09 07:54:07 fetching corpus: 21050, signal 849178/1051890 (executing program)
2021/05/09 07:54:08 fetching corpus: 21100, signal 849811/1052500 (executing program)
2021/05/09 07:54:08 fetching corpus: 21150, signal 850358/1053083 (executing program)
2021/05/09 07:54:08 fetching corpus: 21200, signal 850840/1053696 (executing program)
2021/05/09 07:54:08 fetching corpus: 21250, signal 851834/1054397 (executing program)
2021/05/09 07:54:08 fetching corpus: 21300, signal 852652/1055025 (executing program)
2021/05/09 07:54:08 fetching corpus: 21350, signal 853187/1055603 (executing program)
2021/05/09 07:54:08 fetching corpus: 21400, signal 853692/1056167 (executing program)
2021/05/09 07:54:09 fetching corpus: 21450, signal 854343/1056751 (executing program)
2021/05/09 07:54:09 fetching corpus: 21500, signal 854839/1057303 (executing program)
2021/05/09 07:54:09 fetching corpus: 21550, signal 855354/1057891 (executing program)
2021/05/09 07:54:09 fetching corpus: 21600, signal 855749/1058441 (executing program)
2021/05/09 07:54:09 fetching corpus: 21650, signal 856233/1058992 (executing program)
2021/05/09 07:54:09 fetching corpus: 21700, signal 856828/1059623 (executing program)
2021/05/09 07:54:09 fetching corpus: 21750, signal 857505/1060226 (executing program)
2021/05/09 07:54:09 fetching corpus: 21800, signal 857956/1060789 (executing program)
2021/05/09 07:54:09 fetching corpus: 21850, signal 858296/1061338 (executing program)
2021/05/09 07:54:09 fetching corpus: 21900, signal 858712/1061880 (executing program)
2021/05/09 07:54:10 fetching corpus: 21950, signal 859321/1062448 (executing program)
2021/05/09 07:54:10 fetching corpus: 22000, signal 859656/1062955 (executing program)
2021/05/09 07:54:10 fetching corpus: 22050, signal 860168/1063524 (executing program)
2021/05/09 07:54:10 fetching corpus: 22100, signal 860614/1064077 (executing program)
2021/05/09 07:54:10 fetching corpus: 22150, signal 861152/1064675 (executing program)
2021/05/09 07:54:10 fetching corpus: 22200, signal 861735/1065262 (executing program)
2021/05/09 07:54:10 fetching corpus: 22250, signal 862051/1065774 (executing program)
2021/05/09 07:54:10 fetching corpus: 22300, signal 862503/1066297 (executing program)
2021/05/09 07:54:10 fetching corpus: 22350, signal 862797/1066811 (executing program)
2021/05/09 07:54:10 fetching corpus: 22400, signal 863195/1067343 (executing program)
2021/05/09 07:54:10 fetching corpus: 22450, signal 863489/1067814 (executing program)
2021/05/09 07:54:11 fetching corpus: 22500, signal 864024/1068340 (executing program)
2021/05/09 07:54:11 fetching corpus: 22550, signal 864537/1068883 (executing program)
2021/05/09 07:54:11 fetching corpus: 22600, signal 865016/1069449 (executing program)
2021/05/09 07:54:11 fetching corpus: 22650, signal 865480/1069967 (executing program)
2021/05/09 07:54:11 fetching corpus: 22700, signal 866187/1070516 (executing program)
2021/05/09 07:54:11 fetching corpus: 22750, signal 866521/1071057 (executing program)
2021/05/09 07:54:12 fetching corpus: 22800, signal 867239/1071618 (executing program)
2021/05/09 07:54:12 fetching corpus: 22850, signal 867574/1072107 (executing program)
2021/05/09 07:54:12 fetching corpus: 22900, signal 867931/1072607 (executing program)
2021/05/09 07:54:12 fetching corpus: 22950, signal 868531/1073137 (executing program)
2021/05/09 07:54:12 fetching corpus: 23000, signal 869311/1073735 (executing program)
2021/05/09 07:54:13 fetching corpus: 23050, signal 869772/1074265 (executing program)
2021/05/09 07:54:13 fetching corpus: 23100, signal 870231/1074810 (executing program)
2021/05/09 07:54:13 fetching corpus: 23150, signal 870686/1075337 (executing program)
syzkaller login: [  132.707245][ T3250] ieee802154 phy0 wpan0: encryption failed: -22
[  132.713878][ T3250] ieee802154 phy1 wpan1: encryption failed: -22
2021/05/09 07:54:13 fetching corpus: 23200, signal 871077/1075865 (executing program)
2021/05/09 07:54:14 fetching corpus: 23250, signal 872152/1076480 (executing program)
2021/05/09 07:54:14 fetching corpus: 23300, signal 872545/1076973 (executing program)
2021/05/09 07:54:14 fetching corpus: 23350, signal 872967/1077457 (executing program)
2021/05/09 07:54:15 fetching corpus: 23400, signal 873688/1078022 (executing program)
2021/05/09 07:54:15 fetching corpus: 23450, signal 874364/1078555 (executing program)
2021/05/09 07:54:15 fetching corpus: 23500, signal 874889/1079089 (executing program)
2021/05/09 07:54:15 fetching corpus: 23550, signal 875271/1079563 (executing program)
2021/05/09 07:54:16 fetching corpus: 23600, signal 875760/1080044 (executing program)
2021/05/09 07:54:16 fetching corpus: 23650, signal 876494/1080561 (executing program)
2021/05/09 07:54:16 fetching corpus: 23700, signal 877001/1081064 (executing program)
2021/05/09 07:54:16 fetching corpus: 23750, signal 877440/1081573 (executing program)
2021/05/09 07:54:16 fetching corpus: 23800, signal 877820/1082064 (executing program)
2021/05/09 07:54:17 fetching corpus: 23850, signal 878396/1082549 (executing program)
2021/05/09 07:54:17 fetching corpus: 23900, signal 878993/1083072 (executing program)
2021/05/09 07:54:17 fetching corpus: 23950, signal 879480/1083611 (executing program)
2021/05/09 07:54:17 fetching corpus: 24000, signal 879871/1084084 (executing program)
2021/05/09 07:54:18 fetching corpus: 24050, signal 880391/1084622 (executing program)
2021/05/09 07:54:18 fetching corpus: 24100, signal 880954/1085144 (executing program)
2021/05/09 07:54:18 fetching corpus: 24150, signal 881593/1085626 (executing program)
2021/05/09 07:54:18 fetching corpus: 24200, signal 882197/1086109 (executing program)
2021/05/09 07:54:18 fetching corpus: 24250, signal 882494/1086534 (executing program)
2021/05/09 07:54:19 fetching corpus: 24300, signal 882982/1087033 (executing program)
2021/05/09 07:54:19 fetching corpus: 24350, signal 883443/1087548 (executing program)
2021/05/09 07:54:19 fetching corpus: 24400, signal 883919/1088025 (executing program)
2021/05/09 07:54:19 fetching corpus: 24450, signal 884256/1088515 (executing program)
2021/05/09 07:54:19 fetching corpus: 24500, signal 884506/1088961 (executing program)
2021/05/09 07:54:20 fetching corpus: 24550, signal 884997/1089435 (executing program)
2021/05/09 07:54:20 fetching corpus: 24600, signal 885507/1089913 (executing program)
2021/05/09 07:54:20 fetching corpus: 24650, signal 885908/1090387 (executing program)
2021/05/09 07:54:20 fetching corpus: 24700, signal 886196/1090877 (executing program)
2021/05/09 07:54:20 fetching corpus: 24750, signal 886815/1091363 (executing program)
2021/05/09 07:54:21 fetching corpus: 24800, signal 887205/1091806 (executing program)
2021/05/09 07:54:21 fetching corpus: 24850, signal 887975/1092290 (executing program)
2021/05/09 07:54:21 fetching corpus: 24900, signal 888401/1092773 (executing program)
2021/05/09 07:54:21 fetching corpus: 24950, signal 888777/1093226 (executing program)
2021/05/09 07:54:22 fetching corpus: 25000, signal 889190/1093692 (executing program)
2021/05/09 07:54:22 fetching corpus: 25050, signal 889536/1094129 (executing program)
2021/05/09 07:54:22 fetching corpus: 25100, signal 890115/1094593 (executing program)
2021/05/09 07:54:22 fetching corpus: 25150, signal 890942/1095107 (executing program)
2021/05/09 07:54:22 fetching corpus: 25200, signal 891428/1095584 (executing program)
2021/05/09 07:54:23 fetching corpus: 25250, signal 891870/1096024 (executing program)
2021/05/09 07:54:23 fetching corpus: 25300, signal 892254/1096464 (executing program)
2021/05/09 07:54:23 fetching corpus: 25350, signal 892606/1096885 (executing program)
2021/05/09 07:54:23 fetching corpus: 25400, signal 893008/1097359 (executing program)
2021/05/09 07:54:23 fetching corpus: 25450, signal 893537/1097813 (executing program)
2021/05/09 07:54:24 fetching corpus: 25500, signal 893959/1098293 (executing program)
2021/05/09 07:54:24 fetching corpus: 25550, signal 894361/1098741 (executing program)
2021/05/09 07:54:24 fetching corpus: 25600, signal 894717/1099193 (executing program)
2021/05/09 07:54:25 fetching corpus: 25650, signal 895116/1099607 (executing program)
2021/05/09 07:54:25 fetching corpus: 25700, signal 895416/1100064 (executing program)
2021/05/09 07:54:25 fetching corpus: 25750, signal 896198/1100503 (executing program)
2021/05/09 07:54:25 fetching corpus: 25800, signal 896611/1100958 (executing program)
2021/05/09 07:54:25 fetching corpus: 25850, signal 896950/1101379 (executing program)
2021/05/09 07:54:26 fetching corpus: 25900, signal 897357/1101833 (executing program)
2021/05/09 07:54:26 fetching corpus: 25950, signal 898045/1102276 (executing program)
2021/05/09 07:54:26 fetching corpus: 26000, signal 898402/1102679 (executing program)
2021/05/09 07:54:26 fetching corpus: 26050, signal 898884/1103123 (executing program)
2021/05/09 07:54:26 fetching corpus: 26100, signal 899305/1103533 (executing program)
2021/05/09 07:54:27 fetching corpus: 26150, signal 899710/1103969 (executing program)
2021/05/09 07:54:27 fetching corpus: 26200, signal 900126/1104395 (executing program)
2021/05/09 07:54:27 fetching corpus: 26250, signal 900729/1104844 (executing program)
2021/05/09 07:54:27 fetching corpus: 26300, signal 901211/1105231 (executing program)
2021/05/09 07:54:27 fetching corpus: 26350, signal 901537/1105638 (executing program)
2021/05/09 07:54:28 fetching corpus: 26400, signal 902029/1106069 (executing program)
2021/05/09 07:54:28 fetching corpus: 26450, signal 902358/1106441 (executing program)
2021/05/09 07:54:28 fetching corpus: 26500, signal 902669/1106869 (executing program)
2021/05/09 07:54:28 fetching corpus: 26550, signal 903071/1107266 (executing program)
2021/05/09 07:54:28 fetching corpus: 26600, signal 903601/1107621 (executing program)
2021/05/09 07:54:28 fetching corpus: 26650, signal 903997/1108030 (executing program)
2021/05/09 07:54:29 fetching corpus: 26700, signal 904422/1108443 (executing program)
2021/05/09 07:54:29 fetching corpus: 26750, signal 904709/1108859 (executing program)
2021/05/09 07:54:29 fetching corpus: 26800, signal 905207/1109274 (executing program)
2021/05/09 07:54:29 fetching corpus: 26850, signal 905893/1109657 (executing program)
2021/05/09 07:54:30 fetching corpus: 26900, signal 906768/1110059 (executing program)
2021/05/09 07:54:30 fetching corpus: 26950, signal 907103/1110440 (executing program)
2021/05/09 07:54:30 fetching corpus: 27000, signal 907888/1110844 (executing program)
2021/05/09 07:54:30 fetching corpus: 27050, signal 908133/1111215 (executing program)
2021/05/09 07:54:31 fetching corpus: 27100, signal 908827/1111616 (executing program)
2021/05/09 07:54:31 fetching corpus: 27150, signal 909181/1111998 (executing program)
2021/05/09 07:54:31 fetching corpus: 27200, signal 909458/1112382 (executing program)
2021/05/09 07:54:31 fetching corpus: 27250, signal 909813/1112781 (executing program)
2021/05/09 07:54:31 fetching corpus: 27300, signal 910238/1113184 (executing program)
2021/05/09 07:54:31 fetching corpus: 27350, signal 911355/1113579 (executing program)
2021/05/09 07:54:32 fetching corpus: 27400, signal 911677/1113954 (executing program)
2021/05/09 07:54:32 fetching corpus: 27450, signal 911961/1114316 (executing program)
2021/05/09 07:54:32 fetching corpus: 27500, signal 912823/1114697 (executing program)
2021/05/09 07:54:32 fetching corpus: 27550, signal 913204/1115054 (executing program)
2021/05/09 07:54:32 fetching corpus: 27600, signal 913558/1115426 (executing program)
2021/05/09 07:54:32 fetching corpus: 27650, signal 913867/1115800 (executing program)
2021/05/09 07:54:33 fetching corpus: 27700, signal 914427/1116180 (executing program)
2021/05/09 07:54:33 fetching corpus: 27750, signal 914736/1116514 (executing program)
2021/05/09 07:54:33 fetching corpus: 27800, signal 915227/1116910 (executing program)
2021/05/09 07:54:33 fetching corpus: 27850, signal 915507/1117267 (executing program)
2021/05/09 07:54:33 fetching corpus: 27900, signal 916181/1117501 (executing program)
2021/05/09 07:54:34 fetching corpus: 27950, signal 916632/1117501 (executing program)
2021/05/09 07:54:34 fetching corpus: 28000, signal 916964/1117501 (executing program)
2021/05/09 07:54:34 fetching corpus: 28050, signal 917325/1117501 (executing program)
2021/05/09 07:54:34 fetching corpus: 28100, signal 917806/1117503 (executing program)
2021/05/09 07:54:34 fetching corpus: 28150, signal 918159/1117503 (executing program)
2021/05/09 07:54:35 fetching corpus: 28200, signal 918499/1117503 (executing program)
2021/05/09 07:54:35 fetching corpus: 28250, signal 918906/1117503 (executing program)
2021/05/09 07:54:35 fetching corpus: 28300, signal 919251/1117503 (executing program)
2021/05/09 07:54:35 fetching corpus: 28350, signal 919499/1117503 (executing program)
2021/05/09 07:54:35 fetching corpus: 28400, signal 920100/1117503 (executing program)
2021/05/09 07:54:36 fetching corpus: 28450, signal 920342/1117506 (executing program)
2021/05/09 07:54:36 fetching corpus: 28500, signal 920729/1117506 (executing program)
2021/05/09 07:54:36 fetching corpus: 28550, signal 920960/1117506 (executing program)
2021/05/09 07:54:36 fetching corpus: 28600, signal 921311/1117506 (executing program)
2021/05/09 07:54:37 fetching corpus: 28650, signal 921608/1117506 (executing program)
2021/05/09 07:54:37 fetching corpus: 28700, signal 921900/1117509 (executing program)
2021/05/09 07:54:37 fetching corpus: 28750, signal 922261/1117509 (executing program)
2021/05/09 07:54:37 fetching corpus: 28800, signal 922571/1117509 (executing program)
2021/05/09 07:54:38 fetching corpus: 28850, signal 923037/1117509 (executing program)
2021/05/09 07:54:38 fetching corpus: 28900, signal 923350/1117509 (executing program)
2021/05/09 07:54:38 fetching corpus: 28950, signal 923885/1117509 (executing program)
2021/05/09 07:54:38 fetching corpus: 29000, signal 924166/1117509 (executing program)
2021/05/09 07:54:38 fetching corpus: 29050, signal 924562/1117509 (executing program)
2021/05/09 07:54:39 fetching corpus: 29100, signal 925061/1117509 (executing program)
2021/05/09 07:54:39 fetching corpus: 29150, signal 925492/1117509 (executing program)
2021/05/09 07:54:39 fetching corpus: 29200, signal 926057/1117509 (executing program)
2021/05/09 07:54:39 fetching corpus: 29250, signal 926720/1117509 (executing program)
2021/05/09 07:54:39 fetching corpus: 29300, signal 927021/1117509 (executing program)
2021/05/09 07:54:40 fetching corpus: 29350, signal 927696/1117509 (executing program)
2021/05/09 07:54:40 fetching corpus: 29400, signal 928005/1117509 (executing program)
2021/05/09 07:54:40 fetching corpus: 29450, signal 928292/1117509 (executing program)
2021/05/09 07:54:40 fetching corpus: 29500, signal 928711/1117509 (executing program)
2021/05/09 07:54:40 fetching corpus: 29550, signal 929093/1117509 (executing program)
2021/05/09 07:54:40 fetching corpus: 29600, signal 929440/1117509 (executing program)
2021/05/09 07:54:40 fetching corpus: 29650, signal 929854/1117509 (executing program)
2021/05/09 07:54:41 fetching corpus: 29700, signal 930170/1117509 (executing program)
2021/05/09 07:54:41 fetching corpus: 29750, signal 930547/1117509 (executing program)
2021/05/09 07:54:41 fetching corpus: 29800, signal 930964/1117509 (executing program)
2021/05/09 07:54:41 fetching corpus: 29850, signal 931373/1117509 (executing program)
2021/05/09 07:54:41 fetching corpus: 29900, signal 931903/1117509 (executing program)
2021/05/09 07:54:42 fetching corpus: 29950, signal 932219/1117513 (executing program)
2021/05/09 07:54:42 fetching corpus: 30000, signal 932604/1117513 (executing program)
2021/05/09 07:54:42 fetching corpus: 30050, signal 932930/1117513 (executing program)
2021/05/09 07:54:42 fetching corpus: 30100, signal 933187/1117513 (executing program)
2021/05/09 07:54:42 fetching corpus: 30150, signal 933725/1117513 (executing program)
2021/05/09 07:54:43 fetching corpus: 30200, signal 933994/1117513 (executing program)
2021/05/09 07:54:43 fetching corpus: 30250, signal 934349/1117513 (executing program)
2021/05/09 07:54:43 fetching corpus: 30300, signal 935014/1117513 (executing program)
2021/05/09 07:54:43 fetching corpus: 30350, signal 935724/1117513 (executing program)
2021/05/09 07:54:43 fetching corpus: 30400, signal 935992/1117513 (executing program)
2021/05/09 07:54:44 fetching corpus: 30450, signal 936254/1117513 (executing program)
2021/05/09 07:54:44 fetching corpus: 30500, signal 936581/1117513 (executing program)
2021/05/09 07:54:44 fetching corpus: 30550, signal 937091/1117513 (executing program)
2021/05/09 07:54:44 fetching corpus: 30600, signal 937600/1117513 (executing program)
2021/05/09 07:54:45 fetching corpus: 30650, signal 938011/1117513 (executing program)
2021/05/09 07:54:45 fetching corpus: 30700, signal 938637/1117513 (executing program)
2021/05/09 07:54:45 fetching corpus: 30750, signal 938948/1117513 (executing program)
2021/05/09 07:54:45 fetching corpus: 30800, signal 939281/1117513 (executing program)
2021/05/09 07:54:45 fetching corpus: 30850, signal 939754/1117513 (executing program)
2021/05/09 07:54:46 fetching corpus: 30900, signal 940098/1117513 (executing program)
2021/05/09 07:54:46 fetching corpus: 30950, signal 940817/1117513 (executing program)
2021/05/09 07:54:46 fetching corpus: 31000, signal 941123/1117513 (executing program)
2021/05/09 07:54:46 fetching corpus: 31050, signal 941465/1117513 (executing program)
2021/05/09 07:54:46 fetching corpus: 31100, signal 941689/1117513 (executing program)
2021/05/09 07:54:47 fetching corpus: 31150, signal 942011/1117513 (executing program)
2021/05/09 07:54:47 fetching corpus: 31200, signal 942363/1117513 (executing program)
2021/05/09 07:54:47 fetching corpus: 31250, signal 942915/1117516 (executing program)
2021/05/09 07:54:47 fetching corpus: 31300, signal 943235/1117516 (executing program)
2021/05/09 07:54:47 fetching corpus: 31350, signal 943645/1117516 (executing program)
2021/05/09 07:54:47 fetching corpus: 31400, signal 944129/1117516 (executing program)
2021/05/09 07:54:48 fetching corpus: 31450, signal 944488/1117518 (executing program)
2021/05/09 07:54:48 fetching corpus: 31500, signal 944856/1117518 (executing program)
2021/05/09 07:54:48 fetching corpus: 31550, signal 945120/1117518 (executing program)
2021/05/09 07:54:48 fetching corpus: 31600, signal 945862/1117518 (executing program)
2021/05/09 07:54:48 fetching corpus: 31650, signal 946084/1117518 (executing program)
2021/05/09 07:54:49 fetching corpus: 31700, signal 946472/1117518 (executing program)
2021/05/09 07:54:49 fetching corpus: 31750, signal 946896/1117518 (executing program)
2021/05/09 07:54:49 fetching corpus: 31800, signal 947363/1117519 (executing program)
2021/05/09 07:54:49 fetching corpus: 31850, signal 947649/1117519 (executing program)
2021/05/09 07:54:49 fetching corpus: 31900, signal 947972/1117519 (executing program)
2021/05/09 07:54:50 fetching corpus: 31950, signal 948422/1117519 (executing program)
2021/05/09 07:54:50 fetching corpus: 32000, signal 948770/1117519 (executing program)
2021/05/09 07:54:50 fetching corpus: 32050, signal 949183/1117519 (executing program)
2021/05/09 07:54:50 fetching corpus: 32100, signal 949583/1117519 (executing program)
2021/05/09 07:54:50 fetching corpus: 32150, signal 949852/1117519 (executing program)
2021/05/09 07:54:51 fetching corpus: 32200, signal 950158/1117519 (executing program)
2021/05/09 07:54:51 fetching corpus: 32250, signal 950475/1117519 (executing program)
2021/05/09 07:54:51 fetching corpus: 32300, signal 951002/1117528 (executing program)
2021/05/09 07:54:51 fetching corpus: 32350, signal 951469/1117528 (executing program)
2021/05/09 07:54:51 fetching corpus: 32400, signal 951836/1117528 (executing program)
2021/05/09 07:54:52 fetching corpus: 32450, signal 952227/1117528 (executing program)
2021/05/09 07:54:52 fetching corpus: 32500, signal 952790/1117528 (executing program)
2021/05/09 07:54:52 fetching corpus: 32550, signal 953246/1117528 (executing program)
2021/05/09 07:54:52 fetching corpus: 32600, signal 953697/1117528 (executing program)
2021/05/09 07:54:52 fetching corpus: 32650, signal 954042/1117528 (executing program)
2021/05/09 07:54:53 fetching corpus: 32700, signal 954557/1117528 (executing program)
2021/05/09 07:54:53 fetching corpus: 32750, signal 954771/1117528 (executing program)
2021/05/09 07:54:53 fetching corpus: 32800, signal 955241/1117528 (executing program)
2021/05/09 07:54:53 fetching corpus: 32850, signal 955620/1117528 (executing program)
2021/05/09 07:54:53 fetching corpus: 32900, signal 955889/1117528 (executing program)
2021/05/09 07:54:54 fetching corpus: 32950, signal 956445/1117531 (executing program)
2021/05/09 07:54:54 fetching corpus: 33000, signal 956804/1117531 (executing program)
2021/05/09 07:54:54 fetching corpus: 33050, signal 957115/1117531 (executing program)
2021/05/09 07:54:54 fetching corpus: 33100, signal 957572/1117531 (executing program)
2021/05/09 07:54:55 fetching corpus: 33150, signal 958053/1117531 (executing program)
2021/05/09 07:54:55 fetching corpus: 33200, signal 958333/1117531 (executing program)
2021/05/09 07:54:55 fetching corpus: 33250, signal 958685/1117531 (executing program)
2021/05/09 07:54:55 fetching corpus: 33300, signal 958977/1117531 (executing program)
2021/05/09 07:54:55 fetching corpus: 33350, signal 959339/1117531 (executing program)
2021/05/09 07:54:56 fetching corpus: 33400, signal 959627/1117531 (executing program)
2021/05/09 07:54:56 fetching corpus: 33450, signal 959862/1117531 (executing program)
2021/05/09 07:54:56 fetching corpus: 33500, signal 960132/1117531 (executing program)
2021/05/09 07:54:56 fetching corpus: 33550, signal 960601/1117531 (executing program)
2021/05/09 07:54:56 fetching corpus: 33600, signal 961077/1117531 (executing program)
2021/05/09 07:54:57 fetching corpus: 33650, signal 961362/1117535 (executing program)
2021/05/09 07:54:57 fetching corpus: 33700, signal 961615/1117536 (executing program)
2021/05/09 07:54:57 fetching corpus: 33750, signal 961974/1117536 (executing program)
2021/05/09 07:54:57 fetching corpus: 33800, signal 962445/1117536 (executing program)
2021/05/09 07:54:57 fetching corpus: 33850, signal 962822/1117536 (executing program)
2021/05/09 07:54:58 fetching corpus: 33900, signal 963229/1117536 (executing program)
2021/05/09 07:54:58 fetching corpus: 33950, signal 963740/1117536 (executing program)
2021/05/09 07:54:58 fetching corpus: 34000, signal 963948/1117536 (executing program)
2021/05/09 07:54:58 fetching corpus: 34050, signal 964294/1117536 (executing program)
2021/05/09 07:54:59 fetching corpus: 34100, signal 964664/1117570 (executing program)
2021/05/09 07:54:59 fetching corpus: 34150, signal 964985/1117570 (executing program)
2021/05/09 07:54:59 fetching corpus: 34200, signal 965459/1117570 (executing program)
2021/05/09 07:54:59 fetching corpus: 34250, signal 965841/1117570 (executing program)
2021/05/09 07:54:59 fetching corpus: 34300, signal 966113/1117570 (executing program)
2021/05/09 07:54:59 fetching corpus: 34350, signal 966392/1117570 (executing program)
2021/05/09 07:55:00 fetching corpus: 34400, signal 966754/1117575 (executing program)
2021/05/09 07:55:00 fetching corpus: 34450, signal 967023/1117575 (executing program)
2021/05/09 07:55:00 fetching corpus: 34500, signal 967382/1117575 (executing program)
2021/05/09 07:55:00 fetching corpus: 34550, signal 967763/1117577 (executing program)
2021/05/09 07:55:00 fetching corpus: 34600, signal 968089/1117577 (executing program)
2021/05/09 07:55:01 fetching corpus: 34650, signal 968410/1117577 (executing program)
2021/05/09 07:55:01 fetching corpus: 34700, signal 968639/1117578 (executing program)
2021/05/09 07:55:01 fetching corpus: 34750, signal 968944/1117578 (executing program)
2021/05/09 07:55:02 fetching corpus: 34800, signal 969329/1117578 (executing program)
2021/05/09 07:55:02 fetching corpus: 34850, signal 969817/1117578 (executing program)
2021/05/09 07:55:02 fetching corpus: 34900, signal 970144/1117578 (executing program)
2021/05/09 07:55:02 fetching corpus: 34950, signal 970387/1117578 (executing program)
2021/05/09 07:55:02 fetching corpus: 35000, signal 970669/1117578 (executing program)
2021/05/09 07:55:02 fetching corpus: 35050, signal 970977/1117578 (executing program)
2021/05/09 07:55:03 fetching corpus: 35100, signal 971260/1117578 (executing program)
2021/05/09 07:55:03 fetching corpus: 35150, signal 971593/1117578 (executing program)
2021/05/09 07:55:03 fetching corpus: 35200, signal 971944/1117578 (executing program)
2021/05/09 07:55:03 fetching corpus: 35250, signal 972516/1117578 (executing program)
2021/05/09 07:55:03 fetching corpus: 35300, signal 972917/1117578 (executing program)
2021/05/09 07:55:03 fetching corpus: 35350, signal 973275/1117578 (executing program)
2021/05/09 07:55:04 fetching corpus: 35400, signal 973722/1117578 (executing program)
2021/05/09 07:55:04 fetching corpus: 35450, signal 974127/1117578 (executing program)
2021/05/09 07:55:04 fetching corpus: 35500, signal 974492/1117578 (executing program)
2021/05/09 07:55:04 fetching corpus: 35550, signal 975006/1117578 (executing program)
2021/05/09 07:55:04 fetching corpus: 35600, signal 975275/1117578 (executing program)
2021/05/09 07:55:04 fetching corpus: 35650, signal 975462/1117578 (executing program)
2021/05/09 07:55:05 fetching corpus: 35700, signal 975751/1117578 (executing program)
2021/05/09 07:55:05 fetching corpus: 35750, signal 976052/1117578 (executing program)
2021/05/09 07:55:05 fetching corpus: 35800, signal 976407/1117578 (executing program)
2021/05/09 07:55:05 fetching corpus: 35850, signal 976610/1117578 (executing program)
2021/05/09 07:55:05 fetching corpus: 35900, signal 977163/1117578 (executing program)
2021/05/09 07:55:06 fetching corpus: 35950, signal 977397/1117578 (executing program)
2021/05/09 07:55:06 fetching corpus: 36000, signal 977682/1117578 (executing program)
2021/05/09 07:55:06 fetching corpus: 36050, signal 978018/1117578 (executing program)
2021/05/09 07:55:07 fetching corpus: 36100, signal 978220/1117578 (executing program)
2021/05/09 07:55:07 fetching corpus: 36150, signal 978515/1117578 (executing program)
2021/05/09 07:55:07 fetching corpus: 36200, signal 978828/1117578 (executing program)
2021/05/09 07:55:07 fetching corpus: 36250, signal 979097/1117580 (executing program)
2021/05/09 07:55:07 fetching corpus: 36300, signal 979308/1117580 (executing program)
2021/05/09 07:55:08 fetching corpus: 36350, signal 979589/1117580 (executing program)
2021/05/09 07:55:08 fetching corpus: 36400, signal 979981/1117580 (executing program)
2021/05/09 07:55:08 fetching corpus: 36450, signal 980163/1117580 (executing program)
2021/05/09 07:55:08 fetching corpus: 36500, signal 980514/1117580 (executing program)
2021/05/09 07:55:08 fetching corpus: 36550, signal 980875/1117580 (executing program)
2021/05/09 07:55:09 fetching corpus: 36600, signal 981244/1117580 (executing program)
2021/05/09 07:55:09 fetching corpus: 36650, signal 981463/1117580 (executing program)
2021/05/09 07:55:09 fetching corpus: 36700, signal 981828/1117580 (executing program)
2021/05/09 07:55:09 fetching corpus: 36750, signal 982041/1117580 (executing program)
2021/05/09 07:55:10 fetching corpus: 36800, signal 982418/1117580 (executing program)
2021/05/09 07:55:10 fetching corpus: 36850, signal 982625/1117580 (executing program)
2021/05/09 07:55:10 fetching corpus: 36900, signal 982844/1117580 (executing program)
2021/05/09 07:55:10 fetching corpus: 36950, signal 983487/1117580 (executing program)
2021/05/09 07:55:10 fetching corpus: 37000, signal 983682/1117580 (executing program)
2021/05/09 07:55:11 fetching corpus: 37050, signal 984065/1117580 (executing program)
2021/05/09 07:55:11 fetching corpus: 37100, signal 984308/1117580 (executing program)
2021/05/09 07:55:11 fetching corpus: 37150, signal 984576/1117580 (executing program)
2021/05/09 07:55:11 fetching corpus: 37200, signal 984915/1117580 (executing program)
2021/05/09 07:55:11 fetching corpus: 37250, signal 985220/1117580 (executing program)
2021/05/09 07:55:12 fetching corpus: 37300, signal 985518/1117585 (executing program)
2021/05/09 07:55:12 fetching corpus: 37350, signal 986049/1117599 (executing program)
2021/05/09 07:55:12 fetching corpus: 37400, signal 986360/1117599 (executing program)
2021/05/09 07:55:12 fetching corpus: 37450, signal 986811/1117599 (executing program)
2021/05/09 07:55:12 fetching corpus: 37500, signal 987129/1117599 (executing program)
2021/05/09 07:55:12 fetching corpus: 37550, signal 987422/1117599 (executing program)
2021/05/09 07:55:12 fetching corpus: 37600, signal 988008/1117599 (executing program)
2021/05/09 07:55:13 fetching corpus: 37650, signal 988322/1117599 (executing program)
2021/05/09 07:55:13 fetching corpus: 37700, signal 988523/1117599 (executing program)
2021/05/09 07:55:13 fetching corpus: 37750, signal 988804/1117599 (executing program)
2021/05/09 07:55:13 fetching corpus: 37800, signal 989103/1117599 (executing program)
2021/05/09 07:55:14 fetching corpus: 37850, signal 989468/1117599 (executing program)
2021/05/09 07:55:14 fetching corpus: 37900, signal 989675/1117599 (executing program)
2021/05/09 07:55:14 fetching corpus: 37950, signal 989970/1117599 (executing program)
2021/05/09 07:55:14 fetching corpus: 38000, signal 990339/1117599 (executing program)
2021/05/09 07:55:14 fetching corpus: 38050, signal 990662/1117599 (executing program)
2021/05/09 07:55:15 fetching corpus: 38100, signal 991058/1117599 (executing program)
[  194.146952][ T3250] ieee802154 phy0 wpan0: encryption failed: -22
[  194.153469][ T3250] ieee802154 phy1 wpan1: encryption failed: -22
2021/05/09 07:55:15 fetching corpus: 38150, signal 991290/1117599 (executing program)
2021/05/09 07:55:15 fetching corpus: 38200, signal 991578/1117599 (executing program)
2021/05/09 07:55:15 fetching corpus: 38250, signal 991836/1117599 (executing program)
2021/05/09 07:55:15 fetching corpus: 38300, signal 992234/1117599 (executing program)
2021/05/09 07:55:16 fetching corpus: 38350, signal 992504/1117599 (executing program)
2021/05/09 07:55:16 fetching corpus: 38400, signal 992876/1117599 (executing program)
2021/05/09 07:55:16 fetching corpus: 38450, signal 993295/1117599 (executing program)
2021/05/09 07:55:16 fetching corpus: 38500, signal 993786/1117599 (executing program)
2021/05/09 07:55:16 fetching corpus: 38550, signal 994004/1117599 (executing program)
2021/05/09 07:55:17 fetching corpus: 38600, signal 994189/1117599 (executing program)
2021/05/09 07:55:17 fetching corpus: 38650, signal 994488/1117599 (executing program)
2021/05/09 07:55:17 fetching corpus: 38700, signal 994864/1117599 (executing program)
2021/05/09 07:55:17 fetching corpus: 38750, signal 995118/1117599 (executing program)
2021/05/09 07:55:18 fetching corpus: 38800, signal 995386/1117599 (executing program)
2021/05/09 07:55:18 fetching corpus: 38850, signal 995659/1117599 (executing program)
2021/05/09 07:55:18 fetching corpus: 38900, signal 995840/1117599 (executing program)
2021/05/09 07:55:18 fetching corpus: 38950, signal 996116/1117605 (executing program)
2021/05/09 07:55:18 fetching corpus: 39000, signal 996589/1117605 (executing program)
2021/05/09 07:55:19 fetching corpus: 39050, signal 997066/1117605 (executing program)
2021/05/09 07:55:19 fetching corpus: 39100, signal 997386/1117605 (executing program)
2021/05/09 07:55:19 fetching corpus: 39150, signal 997582/1117605 (executing program)
2021/05/09 07:55:19 fetching corpus: 39200, signal 997896/1117605 (executing program)
2021/05/09 07:55:19 fetching corpus: 39250, signal 998099/1117605 (executing program)
2021/05/09 07:55:20 fetching corpus: 39300, signal 998442/1117605 (executing program)
2021/05/09 07:55:20 fetching corpus: 39350, signal 998650/1117605 (executing program)
2021/05/09 07:55:20 fetching corpus: 39400, signal 999116/1117605 (executing program)
2021/05/09 07:55:20 fetching corpus: 39450, signal 999387/1117605 (executing program)
2021/05/09 07:55:21 fetching corpus: 39500, signal 999594/1117605 (executing program)
2021/05/09 07:55:21 fetching corpus: 39550, signal 999803/1117605 (executing program)
2021/05/09 07:55:21 fetching corpus: 39600, signal 1000082/1117617 (executing program)
2021/05/09 07:55:21 fetching corpus: 39628, signal 1000180/1117617 (executing program)
2021/05/09 07:55:21 fetching corpus: 39628, signal 1000180/1117617 (executing program)
2021/05/09 07:55:23 starting 6 fuzzer processes
07:55:23 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x902, 0x0)
read$sequencer(r0, &(0x7f00000000c0)=""/225, 0xe1)

07:55:24 executing program 1:
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000140)="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", 0x5d1}], 0x1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00'})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

07:55:24 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffff7f})

07:55:24 executing program 3:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt(r0, 0x6b, 0x0, 0x0, 0x0)

07:55:24 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10)
perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0)

07:55:25 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

[  204.689356][ T8454] chnl_net:caif_netlink_parms(): no params data found
[  205.062736][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.098140][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.116676][ T8454] device bridge_slave_0 entered promiscuous mode
[  205.142871][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.157416][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.166035][ T8454] device bridge_slave_1 entered promiscuous mode
[  205.231693][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.250744][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.279226][ T8485] chnl_net:caif_netlink_parms(): no params data found
[  205.358215][ T8454] team0: Port device team_slave_0 added
[  205.415194][ T8454] team0: Port device team_slave_1 added
[  205.509246][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.529377][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.614466][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.634103][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.648226][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.660235][ T8485] device bridge_slave_0 entered promiscuous mode
[  205.669673][ T8595] chnl_net:caif_netlink_parms(): no params data found
[  205.684522][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.692393][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.719705][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.734740][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.743104][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.751529][ T8485] device bridge_slave_1 entered promiscuous mode
[  205.837223][ T8454] device hsr_slave_0 entered promiscuous mode
[  205.845145][ T8454] device hsr_slave_1 entered promiscuous mode
[  205.862349][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.898161][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.971666][ T8485] team0: Port device team_slave_0 added
[  206.028451][ T8485] team0: Port device team_slave_1 added
[  206.062621][ T8690] chnl_net:caif_netlink_parms(): no params data found
[  206.093519][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.100901][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.111784][ T8595] device bridge_slave_0 entered promiscuous mode
[  206.155832][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.167263][   T22] Bluetooth: hci0: command 0x0409 tx timeout
[  206.204919][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.217849][ T8595] device bridge_slave_1 entered promiscuous mode
[  206.266674][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.273754][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.321191][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.356485][ T8595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.372179][ T8595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.393598][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.402311][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.429657][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.467121][    T8] Bluetooth: hci1: command 0x0409 tx timeout
[  206.528569][ T8595] team0: Port device team_slave_0 added
[  206.605698][ T8595] team0: Port device team_slave_1 added
[  206.630417][ T8485] device hsr_slave_0 entered promiscuous mode
[  206.642667][ T8485] device hsr_slave_1 entered promiscuous mode
[  206.654466][ T8485] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.663649][ T8485] Cannot create hsr debugfs directory
[  206.673711][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.681430][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.690349][ T8690] device bridge_slave_0 entered promiscuous mode
[  206.702393][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.710405][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.718794][ T8690] device bridge_slave_1 entered promiscuous mode
[  206.757382][ T8889] chnl_net:caif_netlink_parms(): no params data found
[  206.791338][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.798707][ T4900] Bluetooth: hci2: command 0x0409 tx timeout
[  206.803983][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.833703][ T8595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.877685][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.887659][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.894632][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.923364][ T8595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.954602][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.036434][ T4846] Bluetooth: hci3: command 0x0409 tx timeout
[  207.085256][ T8690] team0: Port device team_slave_0 added
[  207.093832][ T8454] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  207.111069][ T8595] device hsr_slave_0 entered promiscuous mode
[  207.119202][ T8595] device hsr_slave_1 entered promiscuous mode
[  207.127077][ T8595] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.134942][ T8595] Cannot create hsr debugfs directory
[  207.149102][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.157104][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.165084][ T8889] device bridge_slave_0 entered promiscuous mode
[  207.181328][ T8690] team0: Port device team_slave_1 added
[  207.202510][ T8454] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  207.215466][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.223264][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.231857][ T8889] device bridge_slave_1 entered promiscuous mode
[  207.256790][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.263969][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.291552][ T8690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.304994][ T8454] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  207.338344][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.351808][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.359143][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.385460][ T8690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.414567][ T8454] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  207.430698][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.498010][ T8690] device hsr_slave_0 entered promiscuous mode
[  207.505274][ T8690] device hsr_slave_1 entered promiscuous mode
[  207.513471][ T8690] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.522643][ T8690] Cannot create hsr debugfs directory
[  207.586756][   T20] Bluetooth: hci4: command 0x0409 tx timeout
[  207.614819][ T8889] team0: Port device team_slave_0 added
[  207.672124][ T8889] team0: Port device team_slave_1 added
[  207.726046][ T9104] chnl_net:caif_netlink_parms(): no params data found
[  207.776421][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.783417][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.812250][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.875426][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.886848][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.915480][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.064944][ T8889] device hsr_slave_0 entered promiscuous mode
[  208.073293][ T8889] device hsr_slave_1 entered promiscuous mode
[  208.081357][ T8889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.090983][ T8889] Cannot create hsr debugfs directory
[  208.102679][ T8485] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  208.113857][ T8485] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  208.132089][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.142330][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.154088][ T9104] device bridge_slave_0 entered promiscuous mode
[  208.163354][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.172127][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.181466][ T9104] device bridge_slave_1 entered promiscuous mode
[  208.207978][ T8485] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  208.236576][    T8] Bluetooth: hci5: command 0x0409 tx timeout
[  208.236637][ T9597] Bluetooth: hci0: command 0x041b tx timeout
[  208.253166][ T8485] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  208.283066][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.296068][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.365435][ T9104] team0: Port device team_slave_0 added
[  208.375749][ T9104] team0: Port device team_slave_1 added
[  208.471334][ T8595] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  208.502404][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.512616][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.539534][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.551441][ T3805] Bluetooth: hci1: command 0x041b tx timeout
[  208.560509][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.567922][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.594856][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.612539][ T8595] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  208.632246][ T8595] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  208.677246][ T8595] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  208.704228][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.768790][ T9104] device hsr_slave_0 entered promiscuous mode
[  208.778395][ T9104] device hsr_slave_1 entered promiscuous mode
[  208.785670][ T9104] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.794626][ T9104] Cannot create hsr debugfs directory
[  208.859187][ T8690] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  208.867619][ T3805] Bluetooth: hci2: command 0x041b tx timeout
[  208.900721][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.915853][ T8454] 8021q: adding VLAN 0 to HW filter on device team0
[  208.929124][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  208.938198][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  208.962589][ T8690] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  208.993940][ T8690] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  209.014118][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  209.022445][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  209.034477][ T8690] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  209.058088][ T8485] 8021q: adding VLAN 0 to HW filter on device team0
[  209.107421][ T9596] Bluetooth: hci3: command 0x041b tx timeout
[  209.132301][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  209.142258][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  209.153094][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.160696][ T9604] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.172105][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  209.181707][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  209.190466][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.197746][ T9604] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.205421][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  209.218106][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  209.229587][ T8889] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  209.242435][ T8889] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  209.275029][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  209.287147][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  209.295864][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.303076][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.326706][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  209.334805][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  209.345130][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  209.354761][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.361949][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.370925][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  209.380435][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  209.390135][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  209.400954][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  209.410112][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  209.447320][ T8889] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  209.463884][ T8889] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  209.488650][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  209.497182][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  209.505736][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  209.515056][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  209.524599][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  209.563468][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  209.571477][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  209.585177][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  209.595157][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  209.604771][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  209.614421][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  209.624723][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  209.642644][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  209.676545][ T9604] Bluetooth: hci4: command 0x041b tx timeout
[  209.715410][ T8454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  209.728848][ T8454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  209.743222][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  209.752262][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  209.761175][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  209.770579][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  209.795213][ T8595] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.814993][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  209.836308][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  209.847416][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  209.899344][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.919636][ T9104] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  209.929726][ T9104] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  209.954715][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  209.968013][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  209.976047][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  209.986017][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  210.009796][ T8595] 8021q: adding VLAN 0 to HW filter on device team0
[  210.026477][ T9104] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  210.042914][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  210.058628][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  210.068205][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.075358][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.099164][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  210.108610][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  210.119262][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  210.128213][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.135290][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.144389][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  210.157438][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.164574][ T9104] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  210.186290][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  210.195153][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  210.246647][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  210.288074][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  210.298267][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  210.306589][    T8] Bluetooth: hci0: command 0x040f tx timeout
[  210.306650][    T8] Bluetooth: hci5: command 0x041b tx timeout
[  210.315107][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  210.352425][ T8485] device veth0_vlan entered promiscuous mode
[  210.361392][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  210.370670][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  210.379633][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  210.389086][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  210.398657][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  210.407274][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  210.418199][ T8690] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.459905][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.478596][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  210.491277][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  210.499165][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  210.513567][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  210.522207][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  210.531384][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  210.541278][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  210.563331][ T8485] device veth1_vlan entered promiscuous mode
[  210.575786][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  210.584710][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  210.593451][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  210.603498][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  210.612219][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  210.625743][ T8690] 8021q: adding VLAN 0 to HW filter on device team0
[  210.633389][    T7] Bluetooth: hci1: command 0x040f tx timeout
[  210.672406][ T8889] 8021q: adding VLAN 0 to HW filter on device team0
[  210.683306][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  210.694411][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  210.703626][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  210.712685][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  210.722166][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  210.731187][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.739488][ T9697] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.751207][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  210.761274][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  210.770163][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  210.799180][ T8454] device veth0_vlan entered promiscuous mode
[  210.828787][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  210.843742][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  210.855291][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.862681][ T3805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.876727][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  210.885348][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  210.894870][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  210.913899][ T8595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.933038][ T8485] device veth0_macvtap entered promiscuous mode
[  210.945276][ T8485] device veth1_macvtap entered promiscuous mode
[  210.952242][ T9697] Bluetooth: hci2: command 0x040f tx timeout
[  210.963804][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  210.972474][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  210.981329][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  210.989453][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  210.997985][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  211.007399][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  211.016882][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.024197][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.034051][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  211.087443][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  211.097497][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  211.107709][ T9726] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.114853][ T9726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.123309][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  211.134026][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  211.143329][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  211.152514][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  211.164361][ T8454] device veth1_vlan entered promiscuous mode
[  211.187042][ T4846] Bluetooth: hci3: command 0x040f tx timeout
[  211.209552][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  211.219453][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  211.230338][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  211.240240][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  211.249759][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  211.260075][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  211.269441][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  211.278849][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  211.287685][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  211.380287][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.390840][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  211.402048][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  211.413093][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  211.422941][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  211.432569][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  211.442679][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  211.452851][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  211.462615][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  211.476622][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.508589][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.524060][ T8595] device veth0_vlan entered promiscuous mode
[  211.536258][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  211.545768][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  211.555477][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  211.564332][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  211.574293][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  211.584673][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  211.594582][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  211.603027][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  211.623837][ T8454] device veth0_macvtap entered promiscuous mode
[  211.637387][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.651597][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.660517][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  211.671211][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  211.682279][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  211.690914][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  211.699304][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  211.709070][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  211.719138][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  211.731799][ T9104] 8021q: adding VLAN 0 to HW filter on device team0
[  211.748263][ T8595] device veth1_vlan entered promiscuous mode
[  211.767254][ T4846] Bluetooth: hci4: command 0x040f tx timeout
[  211.786387][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  211.794715][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  211.804473][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  211.814923][ T8454] device veth1_macvtap entered promiscuous mode
[  211.825865][ T8485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.836596][ T8485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.845507][ T8485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.858751][ T8485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.884464][ T8690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.914555][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  211.927615][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.940690][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.971248][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  211.979733][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  211.988817][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  212.000110][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  212.010100][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  212.019297][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  212.028440][ T9726] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.035511][ T9726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.088423][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  212.100446][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.113480][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.130236][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.139375][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  212.149219][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  212.157956][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  212.165414][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  212.174726][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  212.183781][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.190910][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.199081][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  212.208504][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  212.217776][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  212.231079][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  212.239902][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  212.249487][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  212.289994][ T8454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.300433][ T8454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.311770][ T8454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.323625][ T8454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.387489][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  212.400064][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  212.411283][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  212.420521][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  212.439009][ T8595] device veth0_macvtap entered promiscuous mode
[  212.446803][ T4846] Bluetooth: hci5: command 0x040f tx timeout
[  212.453466][ T4846] Bluetooth: hci0: command 0x0419 tx timeout
[  212.485892][ T8690] device veth0_vlan entered promiscuous mode
[  212.512646][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  212.537381][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  212.545691][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  212.584710][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  212.601202][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  212.614220][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  212.632125][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  212.647833][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  212.688288][ T8690] device veth1_vlan entered promiscuous mode
[  212.706928][ T8595] device veth1_macvtap entered promiscuous mode
[  212.717633][ T9754] Bluetooth: hci1: command 0x0419 tx timeout
[  212.734619][ T9104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  212.745357][ T9104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.780301][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  212.797606][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  212.805921][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  212.824086][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  212.834696][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  212.843699][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  212.852822][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  212.862095][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  212.871665][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  212.915719][  T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.964382][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  212.976383][  T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.979241][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.997194][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  213.008563][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.020991][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.028652][ T9726] Bluetooth: hci2: command 0x0419 tx timeout
[  213.054314][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  213.066312][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  213.074259][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  213.091488][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.102932][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  213.119842][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  213.141063][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.157973][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  213.171872][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.183562][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  213.195045][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.208128][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.221041][ T8595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.230197][ T8595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.239647][ T8595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.252381][ T8595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.266907][ T9726] Bluetooth: hci3: command 0x0419 tx timeout
[  213.273877][ T8690] device veth0_macvtap entered promiscuous mode
[  213.286816][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  213.296035][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  213.305251][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  213.314501][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  213.324382][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  213.334522][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  213.348110][ T8889] device veth0_vlan entered promiscuous mode
[  213.358515][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  213.366860][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  213.374808][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  213.404503][ T8690] device veth1_macvtap entered promiscuous mode
[  213.464482][ T8889] device veth1_vlan entered promiscuous mode
[  213.484921][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.505159][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.508773][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  213.523270][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  213.532953][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  213.542527][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  213.552261][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  213.596400][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.601743][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  213.612991][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.614074][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  213.631993][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  213.687709][ T9104] device veth0_vlan entered promiscuous mode
[  213.700108][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  213.711173][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.723617][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  213.735018][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.745607][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  213.759430][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.771889][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.780316][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  213.788779][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  213.798568][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  213.807452][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  213.816064][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  213.829517][ T9726] Bluetooth: hci4: command 0x0419 tx timeout
[  213.835251][ T8889] device veth0_macvtap entered promiscuous mode
[  213.854769][ T8889] device veth1_macvtap entered promiscuous mode
[  213.867360][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  213.881864][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.892315][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  213.903993][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.919197][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  213.931558][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.944421][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.987769][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  213.996968][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.004784][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  214.005011][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.026572][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  214.044710][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  214.057325][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  214.070218][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  214.110418][ T9104] device veth1_vlan entered promiscuous mode
[  214.155865][ T8690] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.175170][ T8690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.192971][ T8690] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.203312][ T8690] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.262687][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  214.370625][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  214.387251][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.405990][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  214.421045][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.439971][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  214.456400][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.467902][ T4846] Bluetooth: hci5: command 0x0419 tx timeout
[  214.477117][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  214.491346][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.504636][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0
07:55:35 executing program 0:
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

[  214.554210][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.563040][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  214.589964][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.590352][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  214.616592][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  214.632739][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  214.648463][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  214.699983][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  214.724117][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
07:55:35 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000000c0))

[  214.758073][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  214.777920][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.795382][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
07:55:35 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000006c0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=[@pktinfo={{0x24, 0x29, 0x3e, {@ipv4={'\x00', '\xff\xff', @multicast1}}}}], 0x28}}], 0x2, 0x0)

[  214.845970][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.867058][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  214.902500][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.921995][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.942003][ T9104] device veth0_macvtap entered promiscuous mode
07:55:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x13, 0x0, 0x300)

[  214.962169][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  214.982331][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  215.045354][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  215.084788][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
07:55:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x8040ae9f, 0x0)

[  215.131738][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.144470][ T8889] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.164209][ T8889] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
07:55:36 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)

[  215.206383][ T8889] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.234094][ T8889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.249727][ T9844] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  215.279350][ T9104] device veth1_macvtap entered promiscuous mode
[  215.301988][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:55:36 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  215.462234][   T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.497630][   T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:55:36 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x5}, 0x48)

[  215.544421][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  215.606003][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.644310][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  215.657037][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.671288][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  215.683160][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
07:55:36 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
utimes(&(0x7f0000000440)='./file0\x00', 0x0)
close(r0)

[  215.715754][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  215.739444][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.798086][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  215.824103][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.877626][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.915360][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  215.930313][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  215.936400][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  215.957705][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  216.013282][   T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.033178][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  216.051550][   T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.088581][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.128013][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  216.158491][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.186241][    T7] usb 1-1: Using ep0 maxpacket: 8
[  216.191747][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  216.216226][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.249618][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  216.270638][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.296525][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  216.316580][    T7] usb 1-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e
[  216.325971][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.346226][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.371718][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.387891][    T7] usb 1-1: config 0 descriptor??
[  216.429151][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  216.445985][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  216.458233][    T7] pwc: Philips PCA645VC USB webcam detected.
[  216.487168][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  216.594265][ T9104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.634840][ T9104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.675894][ T9104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.702342][ T9104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.754538][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.794026][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.871906][    T7] pwc: recv_control_msg error -32 req 02 val 2b00
[  216.879315][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  216.926679][    T7] pwc: recv_control_msg error -32 req 02 val 2700
[  216.940602][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.975851][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.996999][    T7] pwc: recv_control_msg error -32 req 02 val 2c00
[  217.034426][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  217.041979][    T7] pwc: recv_control_msg error -32 req 04 val 1000
[  217.086738][    T7] pwc: recv_control_msg error -32 req 04 val 1300
[  217.097193][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.123558][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.156403][    T7] pwc: recv_control_msg error -32 req 04 val 1400
[  217.178135][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  217.195323][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.196550][    T7] pwc: recv_control_msg error -32 req 02 val 2000
[  217.215171][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.241688][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  217.256523][    T7] pwc: recv_control_msg error -32 req 02 val 2100
[  217.312657][    T7] pwc: recv_control_msg error -32 req 04 val 1500
[  217.356389][    T7] pwc: recv_control_msg error -32 req 02 val 2500
[  217.403144][    T7] pwc: recv_control_msg error -32 req 02 val 2400
[  217.456401][    T7] pwc: recv_control_msg error -32 req 02 val 2600
07:55:38 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1d0000002400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000a000100636f64656c0000000c0002000800010000000001"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0)

[  217.683381][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  217.716608][    T7] pwc: recv_control_msg error -71 req 02 val 2800
[  217.736479][    T7] pwc: recv_control_msg error -71 req 04 val 1100
[  217.766496][    T7] pwc: recv_control_msg error -71 req 04 val 1200
07:55:38 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bb9b40b72040158fef000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0x21, 0x1, 0x1f}})
syz_usb_control_io(r0, 0x0, &(0x7f00000027c0)={0xfffffffffffffc95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x40, 0x21, 0x1}})
syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0xfffffffffffffe4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "9c2c08ad", "7a0274ca"}}, 0x0}, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x21, 0x1}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0})

07:55:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x328, 0x344, 0x244, 0xffffffff, 0x0, 0x344, 0x414, 0x414, 0xffffffff, 0x414, 0x414, 0x5, 0x0, {[{{@ip={@local, @private, 0x0, 0x0, 'wg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x94}, @common=@unspec=@AUDIT={0x24}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @rand_addr, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev, @ipv4=@empty, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3)

07:55:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001300)={'ipvlan1\x00', &(0x7f00000012c0)=@ethtool_wolinfo={0x5, 0x0, 0x0, "1b2a7718ca25"}})

07:55:38 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

[  217.785041][    T7] pwc: Registered as video71.
[  217.824995][    T7] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
07:55:38 executing program 1:
r0 = socket(0xa, 0x3, 0x4)
getsockopt$bt_BT_SECURITY(r0, 0x29, 0x3, 0x0, 0x9a1000)

07:55:38 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x18, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0)

[  217.913534][    T7] usb 1-1: USB disconnect, device number 2
07:55:38 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

07:55:39 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10)

[  218.246531][ T9754] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  218.596349][    T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  218.653674][ T9754] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f
[  218.665010][ T9754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.684570][ T9754] usb 5-1: config 0 descriptor??
[  218.856269][    T7] usb 1-1: Using ep0 maxpacket: 8
[  218.976658][    T7] usb 1-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e
[  219.000990][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.085020][    T7] usb 1-1: config 0 descriptor??
[  219.159263][    T7] pwc: Philips PCA645VC USB webcam detected.
07:55:40 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000001300)='map_files\x00')
fchdir(r2)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x18, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0)

07:55:40 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

07:55:40 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

[  219.303810][    T7] pwc: send_video_command error -71
[  219.319919][    T7] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  219.358591][    T7] Philips webcam: probe of 1-1:0.0 failed with error -71
[  219.413475][    T7] usb 1-1: USB disconnect, device number 3
[  219.676578][   T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  219.816703][ T9754] usb 5-1: ATUSB: AT86RF212 version 0
[  219.956354][   T20] usb 2-1: Using ep0 maxpacket: 16
[  220.047335][ T9754] usb 5-1: Firmware: major: 15, minor: 41, hardware type: ATUSB (1)
[  220.096514][   T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.106752][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  220.119499][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  220.130278][   T20] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  220.141711][   T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.227975][   T20] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  220.237390][   T20] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  220.248080][   T20] usb 2-1: Manufacturer: syz
[  220.262171][   T20] usb 2-1: config 0 descriptor??
[  220.267523][ T9754] usb 5-1: atusb_control_msg: req 0x01 val 0x0 idx 0x0, error -71
[  220.278332][ T9754] usb 5-1: failed to fetch extended address, random address set
[  220.310187][ T9754] usb 5-1: atusb_probe: initialization failed, error = -71
[  220.341068][ T9754] atusb: probe of 5-1:0.0 failed with error -71
[  220.365364][ T9754] usb 5-1: USB disconnect, device number 2
[  220.616364][   T20] rc_core: IR keymap rc-hauppauge not found
[  220.622398][   T20] Registered IR keymap rc-empty
[  220.630059][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  220.666434][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  220.699343][   T20] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  220.715455][   T20] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6
[  220.745823][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  220.787570][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  220.826533][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  220.856993][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  220.886359][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  220.916426][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  220.946963][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  220.976408][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  221.006359][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  221.037680][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  221.037914][    T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  221.074701][   T20] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  221.083198][   T20] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  221.143213][ T9706] usb 2-1: USB disconnect, device number 2
[  221.156185][    C1] mceusb 2-1:0.0: Error: urb status = -71
[  221.486557][    T5] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f
[  221.495882][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.515437][    T5] usb 5-1: config 0 descriptor??
07:55:42 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x9c)

07:55:42 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000001300)='map_files\x00')
fchdir(r2)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:42 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0000, 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000180)={r1})

07:55:42 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000))

07:55:42 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x4)
close(r0)

[  221.716334][    T5] usb 5-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71
[  221.724959][    T5] usb 5-1: Firmware version (0.0) predates our first public release.
[  221.799039][    T5] usb 5-1: Please update to version 0.2 or newer
[  221.836875][    T5] usb 5-1: atusb_probe: initialization failed, error = -71
07:55:42 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x4)
close(r0)

07:55:42 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000001300)='map_files\x00')
fchdir(r2)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  221.874200][    T5] atusb: probe of 5-1:0.0 failed with error -71
07:55:42 executing program 2:
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800004, 0x12, r1, 0x0)
preadv(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0)

07:55:42 executing program 3:
unshare(0x2040400)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x119, 0x2a, 0x0, 0x0)

07:55:42 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0x17, 0x0, 0x0, @dev}}]}, 0x38}}, 0x0)

[  221.933335][    T5] usb 5-1: USB disconnect, device number 3
07:55:43 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000001300)='map_files\x00')
fchdir(r2)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  222.126964][ T9706] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  222.414782][ T9706] usb 2-1: Using ep0 maxpacket: 16
07:55:43 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:55:43 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x4)
close(r0)

07:55:43 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x1000000010, 0x80002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

07:55:43 executing program 4:
r0 = fork()
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r0, 0x0)

07:55:43 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000003, 0x2, @thr={0x0, 0x0}})

07:55:43 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
syz_open_procfs(0x0, &(0x7f0000001300)='map_files\x00')
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  222.586324][ T9706] usb 2-1: device descriptor read/all, error -71
07:55:43 executing program 2:
syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f00007ff000/0x800000)=nil, &(0x7f0000bc8000/0x4000)=nil, 0x0, 0x0)

07:55:43 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

07:55:43 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x101002)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

07:55:43 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:43 executing program 4:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x103, 0x0)

07:55:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
unshare(0x400)
ioctl$KVM_CREATE_VM(r0, 0xc004ae02, 0x400000)

[  223.006458][ T9706] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  223.286402][ T9706] usb 2-1: Using ep0 maxpacket: 16
[  223.416442][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.427412][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  223.440761][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  223.453062][ T9706] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  223.464217][ T9706] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  223.566803][ T9706] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  223.600514][ T9706] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  223.622721][ T9706] usb 2-1: Manufacturer: syz
[  223.647068][ T9706] usb 2-1: config 0 descriptor??
[  223.986467][ T9706] rc_core: IR keymap rc-hauppauge not found
[  223.992517][ T9706] Registered IR keymap rc-empty
[  223.999245][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.036405][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.071599][ T9706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  224.096420][ T9706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  224.114317][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.156835][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.197105][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.238783][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.282467][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.316445][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.346253][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.376857][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.406318][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.436398][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  224.483046][ T9706] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  224.491252][ T9706] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  224.526226][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  224.546238][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  224.553024][ T9706] usb 2-1: USB disconnect, device number 4
07:55:46 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:55:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}]}, 0x48}}, 0x0)

07:55:46 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

07:55:46 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:46 executing program 2:
r0 = syz_io_uring_setup(0x20d3, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x50a}}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

07:55:46 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00')
preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/187, 0xbb}], 0x1, 0x67, 0x0)

07:55:46 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000340)=[{0x35, 0x0, 0x0, 0x9}, {0x1d}, {0x6}]})

07:55:46 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:46 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

07:55:46 executing program 4:
setitimer(0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
getitimer(0x1, &(0x7f0000000140))

07:55:46 executing program 4:
unshare(0x400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0)

07:55:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(0xffffffffffffffff)

[  225.526257][    T5] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  225.552727][   T38] audit: type=1326 audit(1620546946.506:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10175 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0
[  225.816368][    T5] usb 2-1: Using ep0 maxpacket: 16
[  225.976832][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.994728][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  226.013187][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  226.025110][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  226.036543][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  226.137229][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  226.149077][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  226.159009][    T5] usb 2-1: Manufacturer: syz
[  226.172537][    T5] usb 2-1: config 0 descriptor??
[  226.516277][    T5] rc_core: IR keymap rc-hauppauge not found
[  226.523081][    T5] Registered IR keymap rc-empty
[  226.528804][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.567358][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.597008][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  226.612572][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8
[  226.648066][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.676375][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.718218][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.766553][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.806329][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.846472][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.887285][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.926660][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.956343][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.986546][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  227.017333][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  227.025388][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  227.070181][    T5] usb 2-1: USB disconnect, device number 5
07:55:48 executing program 4:
waitid(0x2, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000080))
r0 = fork()
r1 = fork()
bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c)
kcmp(r1, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
wait4(r1, &(0x7f0000000440), 0x2, 0x0)
waitid(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0)
waitid(0x0, 0x0, &(0x7f0000000840), 0x1000000, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x5}, 0x12100)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)

07:55:48 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(0xffffffffffffffff)

07:55:48 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080))

07:55:48 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7)

07:55:48 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:55:48 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x4, &(0x7f0000000000), 0x4)

07:55:48 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(0xffffffffffffffff)

07:55:48 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x145)
write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x88, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f00000000c0)=0x1, r1, &(0x7f0000000140)=0x7fffffff, 0x7ffe, 0x8d1e8d607900866c)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000008c0)=ANY=[])
lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, 0x0)
mkdirat(r2, &(0x7f0000000440)='./file0\x00', 0xc7)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf250a000000080001007063690011000200303030303a30323a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0xac}}, 0x0)
io_setup(0x4, &(0x7f00000002c0))
dup(0xffffffffffffffff)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000340)={0x0, 0x2, 0x3, 0x7fffffd})

07:55:48 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

07:55:48 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  228.020834][    C0] sd 0:0:1:0: [sg0] tag#3075 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  228.031310][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB: Test Unit Ready
[  228.037850][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.047551][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.057257][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.066891][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.076512][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.087799][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.097596][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.107213][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.116841][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.126990][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.136607][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.146217][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.155794][    C0] sd 0:0:1:0: [sg0] tag#3075 CDB[c0]: 00 00 00 00 00 00 00 00
[  228.223200][    T5] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  228.496454][    T5] usb 2-1: Using ep0 maxpacket: 16
07:55:49 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_int(r0, 0x84, 0x18, 0x0, &(0x7f0000000e00)=0x13)

07:55:49 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

07:55:49 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:49 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r1, 0x6deb, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x0, 0xca9a3b, &(0x7f00000000c0)={0x77359400}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1d4b9d847c2cc87dd438128d010687f92a18a9"})

07:55:49 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x145)
write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x88, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f00000000c0)=0x1, r1, &(0x7f0000000140)=0x7fffffff, 0x7ffe, 0x8d1e8d607900866c)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000008c0)=ANY=[])
lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, 0x0)
mkdirat(r2, &(0x7f0000000440)='./file0\x00', 0xc7)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf250a000000080001007063690011000200303030303a30323a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0xac}}, 0x0)
io_setup(0x4, &(0x7f00000002c0))
dup(0xffffffffffffffff)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000340)={0x0, 0x2, 0x3, 0x7fffffd})

[  228.616811][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.616896][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  228.616938][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  228.616970][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  228.617004][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  228.649108][    C1] sd 0:0:1:0: [sg0] tag#3076 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  228.649155][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB: Test Unit Ready
[  228.649180][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649206][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649231][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649256][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649281][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649316][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649340][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649365][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649390][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649415][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649440][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649464][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  228.649489][    C1] sd 0:0:1:0: [sg0] tag#3076 CDB[c0]: 00 00 00 00 00 00 00 00
[  228.708154][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  228.708197][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  228.708240][    T5] usb 2-1: Manufacturer: syz
[  228.714278][    T5] usb 2-1: config 0 descriptor??
[  229.035205][    T5] rc_core: IR keymap rc-hauppauge not found
[  229.035229][    T5] Registered IR keymap rc-empty
[  229.035306][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.068458][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.097001][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  229.098164][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9
[  229.111559][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.151176][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.186611][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.233926][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.258308][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.301012][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.357910][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.392669][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.421433][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.449689][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  229.487278][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  229.531784][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  229.576173][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  229.596181][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  229.626151][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  229.635614][    T5] usb 2-1: USB disconnect, device number 6
07:55:51 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)

07:55:51 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:51 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

07:55:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_delrule={0x4c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x8, 0x1, @multicast2}, @FRA_DST={0x8, 0x1, @remote}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_SRC={0x8, 0x2, @dev}, @FRA_GENERIC_POLICY=@FRA_GOTO, @FRA_FLOW={0x8}]}, 0x4c}}, 0x0)

07:55:51 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x40405514, 0x0)

07:55:51 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)

07:55:51 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

[  230.190413][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
07:55:51 executing program 2:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r0, 0x8919, 0x0)

07:55:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000002c0)=0x3, 0x4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={0x0}}, 0x0)

07:55:51 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:51 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0)

[  230.456203][    T5] usb 2-1: new high-speed USB device number 7 using dummy_hcd
07:55:51 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

[  230.746224][    T5] usb 2-1: Using ep0 maxpacket: 16
[  230.876739][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.896140][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  230.926352][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  230.945235][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  230.976312][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.086590][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  231.095710][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  231.124400][    T5] usb 2-1: Manufacturer: syz
[  231.146706][    T5] usb 2-1: config 0 descriptor??
[  231.456513][    T5] rc_core: IR keymap rc-hauppauge not found
[  231.462597][    T5] Registered IR keymap rc-empty
[  231.469472][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.506460][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.552501][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  231.575810][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10
[  231.610621][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.636137][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.656208][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.664544][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.686137][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.696374][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.716209][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.736170][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.742258][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.766167][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.778242][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.796167][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.816179][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.822290][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.846151][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.856268][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.866227][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.886243][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.892285][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.916834][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.926249][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.946431][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.956510][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  231.976133][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  231.996263][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  232.003490][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  232.011632][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  232.020119][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  232.029168][    T5] usb 2-1: USB disconnect, device number 7
[  232.036181][    C0] mceusb 2-1:0.0: Error: urb status = -71
07:55:53 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)

07:55:53 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="c84b119bbc9a", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7f0020", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

07:55:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2})
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x5, 0x0, 0x35, 0x0, 0x0, 0x2, 0x10, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x6}, 0x4000, 0xc9e, 0x8001, 0x6, 0x0, 0x1, 0x1, 0x0, 0xdf14}, 0xffffffffffffffff, 0x10, r1, 0x8)
getsockname(r1, &(0x7f00000012c0)=@generic, &(0x7f0000001340)=0x80)
syz_open_dev$loop(&(0x7f00000001c0), 0xbf7, 0x40)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004db80)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001380)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fdc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x61, "97c0d0f7406803"})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0))
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x89a1, &(0x7f0000000300)={@local})
ioctl$sock_inet6_SIOCADDRT(r14, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0))
mlockall(0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x11, 0xffffffffffffffff, 0x0)
getsockopt$inet6_mreq(r14, 0x29, 0x15, &(0x7f00000000c0)={@empty, <r15=>0x0}, &(0x7f0000000100)=0x14)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x4, 0x9501, 0x101, 0x400, 0xf96, 0x0, r15})

07:55:53 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

07:55:53 executing program 4:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07", 0x11}], 0x1}, 0x0)
io_setup(0x1, &(0x7f0000000300)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'})
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

[  232.231075][    C0] hrtimer: interrupt took 36904 ns
07:55:53 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:53 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(r0)

07:55:53 executing program 3:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040))

07:55:53 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x7c, &(0x7f0000000340)={r2}, &(0x7f0000000400)=0x8)

07:55:53 executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x9b, 0x7c, 0x2f, 0x10, 0x644, 0x0, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0x38, 0x7d}}]}}]}}, 0x0)

07:55:53 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, 0x0, 0x0)
close(r0)

[  232.666296][    T5] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  232.856360][ T9753] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  232.926414][    T5] usb 2-1: Using ep0 maxpacket: 16
[  233.076770][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.099219][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  233.102904][ T9753] usb 3-1: Using ep0 maxpacket: 16
[  233.137576][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  233.164895][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  233.177848][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  233.286560][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  233.295800][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  233.305464][    T5] usb 2-1: Manufacturer: syz
[  233.314419][    T5] usb 2-1: config 0 descriptor??
[  233.406477][ T9753] usb 3-1: New USB device found, idVendor=0644, idProduct=0000, bcdDevice= 1.00
[  233.415618][ T9753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.423845][ T9753] usb 3-1: Product: syz
[  233.428805][ T9753] usb 3-1: Manufacturer: syz
[  233.433438][ T9753] usb 3-1: SerialNumber: syz
[  233.440687][ T9753] usb 3-1: config 0 descriptor??
[  233.477363][ T9753] usb-storage 3-1:0.0: USB Mass Storage device detected
[  233.636555][    T5] rc_core: IR keymap rc-hauppauge not found
[  233.642525][    T5] Registered IR keymap rc-empty
[  233.648565][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  233.685805][   T20] usb 3-1: USB disconnect, device number 2
[  233.687576][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  233.767081][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  233.794304][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11
[  233.822939][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  233.846162][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  233.876137][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  233.882193][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  233.906168][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  233.926198][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  233.932284][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  233.956165][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  233.966344][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  233.986177][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.006178][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.012491][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  234.036174][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.046511][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  234.066159][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.086201][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.092382][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  234.116155][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.126820][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  234.136275][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.166165][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.172377][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  234.196198][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.216165][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.222750][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  234.246137][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.257642][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  234.265676][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  234.274381][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  234.297326][    T5] usb 2-1: USB disconnect, device number 8
[  234.306141][    C0] mceusb 2-1:0.0: Error: urb status = -71
07:55:55 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)

07:55:55 executing program 3:
unshare(0x20020000)
unshare(0x2a020000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff)

07:55:55 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:55 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000780), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3ce0a115a077ee17"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x7, 0x97c, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "638bab8ca76582baa6dcc3a85aa50fcb2e50e09f6e468ed2a86ff13d4540e0214943e80963c66da3f53686cad603975e7a662b3284faefbdde364a31df090a08"}}, 0x80}}, 0x0)

07:55:55 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, 0x0, 0x0)
close(r0)

07:55:55 executing program 3:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000080)=""/241, 0xf1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc08c5334, &(0x7f0000000180)={0x51})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'})
tkill(r0, 0x7)

[  234.477076][   T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd
07:55:55 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, 0x0, 0x0)
close(r0)

07:55:55 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:55 executing program 4:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x10, 0x80002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000090b00010064736d61726b00000c0002"], 0x3c}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

[  234.716202][   T20] usb 3-1: Using ep0 maxpacket: 16
07:55:55 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  234.781987][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  234.826912][    T5] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  235.005348][   T20] usb 3-1: New USB device found, idVendor=0644, idProduct=0000, bcdDevice= 1.00
[  235.037129][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.045414][   T20] usb 3-1: Product: syz
[  235.074786][   T20] usb 3-1: Manufacturer: syz
[  235.080490][   T20] usb 3-1: SerialNumber: syz
[  235.093077][   T20] usb 3-1: config 0 descriptor??
[  235.094600][    T5] usb 2-1: Using ep0 maxpacket: 16
[  235.137376][   T20] usb-storage 3-1:0.0: USB Mass Storage device detected
[  235.226643][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.237058][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  235.248634][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  235.258711][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  235.268923][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  235.346838][ T9753] usb 3-1: USB disconnect, device number 3
[  235.356363][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  235.379084][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
07:55:56 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:55:56 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f00000000c0), 0xc)
close(r0)

[  235.398011][    T5] usb 2-1: Manufacturer: syz
[  235.433177][    T5] usb 2-1: config 0 descriptor??
[  235.816159][    T5] rc_core: IR keymap rc-hauppauge not found
[  235.822130][    T5] Registered IR keymap rc-empty
[  235.828906][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  235.876322][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  235.919663][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  235.941449][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12
[  236.016883][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.036249][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.056366][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.063683][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.086144][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.106193][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.126143][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.132329][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.156129][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.176176][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.182311][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.206135][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.226149][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.232640][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.256126][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.276139][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.296209][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.302408][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.326183][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.346258][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.352258][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.366155][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.386594][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.401948][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.409270][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.426200][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.446203][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.452291][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.476157][    C0] mceusb 2-1:0.0: Error: urb status = -71
07:55:57 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:55:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:55:57 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000080))

07:55:57 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f00000000c0), 0xc)
close(r0)

07:55:57 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:55:57 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000840)={0x0, 0x4}, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000840)={0xffff}, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000840)={0x0, 0x4}, 0x4)

[  236.496163][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.502079][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  236.526129][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.546366][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.553491][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  236.576115][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.582912][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  236.606129][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.636203][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  236.643676][    T5] usb 2-1: USB disconnect, device number 9
07:55:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  236.666120][    C0] mceusb 2-1:0.0: Error: urb status = -71
07:55:57 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:55:57 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f00000000c0), 0xc)
close(r0)

07:55:57 executing program 4:
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x4}})

07:55:57 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda}, 0x50)
lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

07:55:57 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  237.206375][    T5] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  237.466180][    T5] usb 2-1: Using ep0 maxpacket: 16
[  237.586282][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.596712][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  237.608082][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  237.617940][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  237.629042][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  237.716723][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  237.757402][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  237.765480][    T5] usb 2-1: Manufacturer: syz
[  237.839482][    T5] usb 2-1: config 0 descriptor??
07:56:00 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:00 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:00 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(0xffffffffffffffff)

07:56:00 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x0, 0x1}, 0x8)

07:56:00 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:00 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda}, 0x50)
lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

07:56:00 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  239.846238][    T5] rc_core: IR keymap rc-hauppauge not found
[  239.852590][    T5] Registered IR keymap rc-empty
07:56:00 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(0xffffffffffffffff)

07:56:00 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  239.892223][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  239.966616][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.007440][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
07:56:01 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:01 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x0, 0x1}, 0x8)

[  240.065338][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13
[  240.112739][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.126116][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.146233][    C0] mceusb 2-1:0.0: Error: urb status = -71
07:56:01 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc)
close(0xffffffffffffffff)

[  240.166215][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.186214][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.192999][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.206108][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.227664][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.236647][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.246770][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.266137][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.286116][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.292676][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.306140][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.326121][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.332917][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.346139][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.366162][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.372417][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.386143][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.406154][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.412644][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.426138][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.446822][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.453014][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.466202][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.486152][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.492281][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.506139][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.526163][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.532298][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  240.546148][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.566127][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.575069][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  240.586112][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.606123][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.615524][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  240.626140][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.646166][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  240.663009][    T5] usb 2-1: USB disconnect, device number 10
[  240.669130][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  241.046391][    T5] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  241.286295][    T5] usb 2-1: Using ep0 maxpacket: 16
[  241.416270][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.431214][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  241.474518][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  241.485492][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  241.501703][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  241.606501][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  241.615696][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  241.631267][    T5] usb 2-1: Manufacturer: syz
[  241.640872][    T5] usb 2-1: config 0 descriptor??
07:56:03 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:03 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:03 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:03 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10040, 0x0)

07:56:03 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:03 executing program 4:
fsopen(&(0x7f00000003c0)='nfs\x00', 0x0)

07:56:04 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:04 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:04 executing program 5:
poll(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)
timer_create(0x0, &(0x7f0000066000), 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
clock_gettime(0x0, &(0x7f0000000080))
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0)

07:56:04 executing program 4:
clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="8f2fe97fd801fbb6e3640874b15a8e480ed6a741ebb58a8f3756ce6dbdad4f6a1d93910523d64ad04f9f4d940d8d590825cbcc9e50482c39e72a2d9f0ff2ea533d74370f7fb157149027f561d21fb2ad350ec3f4b147438cea74b2b327b5a5bd43cde87c8b628afd51960e813ebf61456e149abd37ea1bec581ef6daf291933ff10de99f201b32a900000000000000329f0296b85de0f3b62836794428b7d660afad69a1480000", 0xa7, 0xfffffffffffffffb)

[  243.066381][    T5] rc_core: IR keymap rc-hauppauge not found
[  243.072641][    T5] Registered IR keymap rc-empty
[  243.105662][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.166211][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.207604][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
07:56:04 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket(0x22, 0x2, 0x4)
close(r1)

[  243.245287][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14
[  243.270982][T10697] Invalid option length (129) for dns_resolver key
[  243.288194][T10699] Invalid option length (129) for dns_resolver key
07:56:04 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  243.350992][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.366111][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.386305][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.401078][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.408412][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.428093][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.446112][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.466113][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.486122][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.506113][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.526116][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.532355][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.546116][    C0] mceusb 2-1:0.0: Error: urb status = -71
07:56:04 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  243.566183][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.586125][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.592125][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.606142][    C0] mceusb 2-1:0.0: Error: urb status = -71
07:56:04 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  243.626110][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.632188][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.646143][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.666232][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.676526][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.686148][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.706167][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.712138][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.726135][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.746182][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.752192][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.766131][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.786145][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.792310][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.806131][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.826180][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.832331][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  243.846136][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.866169][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.878763][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  243.887114][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.906179][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.919357][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  243.927959][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.946115][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.966155][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  243.986146][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  244.002302][    T5] usb 2-1: USB disconnect, device number 11
[  244.008384][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  244.426157][    T5] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  244.666481][    T5] usb 2-1: Using ep0 maxpacket: 16
[  244.796749][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.820702][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  244.846535][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  244.881065][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  244.900149][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  245.016626][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  245.025869][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  245.034758][    T5] usb 2-1: Manufacturer: syz
[  245.043404][    T5] usb 2-1: config 0 descriptor??
07:56:07 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:07 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x0, 0x2}}, 0x20)

07:56:07 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:07 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:07 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xb05, 0x183d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000540)={0x0, 0x0, 0x16, {0x16, 0x0, "4a5f57c4ba14ef4d0b849de327ac47ad35320ca0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

07:56:07 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:07 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:07 executing program 4:
unshare(0x6000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000340)=""/229)

[  246.486199][    T5] rc_core: IR keymap rc-hauppauge not found
[  246.507280][    T5] Registered IR keymap rc-empty
07:56:07 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  246.535085][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
07:56:07 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  246.606387][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  246.646920][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  246.686260][ T9753] usb 6-1: new high-speed USB device number 2 using dummy_hcd
07:56:07 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:07 executing program 4:
unshare(0x4020400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0)

[  246.715875][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15
[  246.805136][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  246.826136][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  246.856101][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  246.862285][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  246.886095][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  246.906133][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  246.912313][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  246.936102][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  246.956228][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  246.962373][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  246.986144][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.007118][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  247.016126][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.046114][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.052229][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  247.056911][ T9753] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.076108][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.089706][ T9753] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.096218][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  247.106812][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.125393][ T9753] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  247.146110][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.152172][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  247.168722][ T9753] usb 6-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40
[  247.176126][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.196189][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.203661][ T9753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.212194][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  247.219443][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.236124][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.237525][ T9753] usb 6-1: config 0 descriptor??
[  247.256108][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.262035][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  247.286106][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.306470][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.315283][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  247.336128][    C0] mceusb 2-1:0.0: Error: urb status = -71
[  247.343057][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  247.358721][    T5] usb 2-1: USB disconnect, device number 12
[  247.757319][    T5] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  247.762324][ T9753] asus 0003:0B05:183D.0001: hidraw0: USB HID v0.00 Device [HID 0b05:183d] on usb-dummy_hcd.5-1/input0
[  247.789090][ T9753] asus 0003:0B05:183D.0001: Asus input not registered
[  247.872740][ T9753] asus: probe of 0003:0B05:183D.0001 failed with error -12
[  247.956378][ T9753] usb 6-1: USB disconnect, device number 2
[  248.126493][    T5] usb 2-1: Using ep0 maxpacket: 16
[  248.266315][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.283343][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  248.294859][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  248.310593][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  248.322091][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  248.416390][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  248.425495][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  248.435129][    T5] usb 2-1: Manufacturer: syz
[  248.445489][    T5] usb 2-1: config 0 descriptor??
[  248.736302][    T5] rc_core: IR keymap rc-hauppauge not found
[  248.736412][ T9753] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  248.743432][    T5] Registered IR keymap rc-empty
[  248.755434][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  248.786918][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  248.820275][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  248.847914][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16
[  248.880683][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  248.916665][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  248.946344][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  248.976372][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  249.006307][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  249.036228][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  249.066454][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  249.096205][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  249.126235][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  249.136280][ T9753] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.148172][ T9753] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.158000][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  249.166277][ T9753] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.179922][ T9753] usb 6-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40
[  249.187918][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  249.190732][ T9753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.198828][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  249.214508][ T9753] usb 6-1: config 0 descriptor??
[  249.282218][ T4846] usb 2-1: USB disconnect, device number 13
[  249.496537][ T9753] usbhid 6-1:0.0: can't add hid device: -71
[  249.502673][ T9753] usbhid: probe of 6-1:0.0 failed with error -71
[  249.527554][ T9753] usb 6-1: USB disconnect, device number 3
07:56:10 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:10 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:10 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:10 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000ebdf00000d0001006d"], 0x38}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

07:56:10 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x2, @win={{0xff, 0x1332}, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0}})

[  249.899361][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
07:56:10 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:10 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
unshare(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002a80)={&(0x7f00000000c0)=[0x0, 0xd0], 0x2, 0x800, 0x0, <r1=>0xffffffffffffffff})
setns(r1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0xfffffffffffffe95, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1f, 0x101003)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080))
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setns(r0, 0x0)
clone(0x70224100, 0x0, 0x0, 0x0, 0x0)

[  249.954692][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
07:56:10 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  250.079864][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
07:56:11 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:11 executing program 2:
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @private}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'})

[  250.227415][ T4846] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  250.488082][ T4846] usb 2-1: Using ep0 maxpacket: 16
[  250.626774][ T4846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.643990][ T4846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  250.696409][ T4846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  250.737119][ T4846] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  250.766362][ T4846] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  250.906330][ T4846] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  250.915447][ T4846] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  250.946237][ T4846] usb 2-1: Manufacturer: syz
[  250.953216][ T4846] usb 2-1: config 0 descriptor??
[  251.286192][ T4846] rc_core: IR keymap rc-hauppauge not found
[  251.292434][ T4846] Registered IR keymap rc-empty
[  251.301089][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.346242][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.376805][ T4846] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  251.405575][ T4846] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17
[  251.443089][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.496378][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.526175][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.557699][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.596426][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.626307][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.659345][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.697591][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.726191][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.756237][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  251.788143][ T4846] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  251.796998][ T4846] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  251.871908][ T9706] usb 2-1: USB disconnect, device number 14
[  251.876105][    C1] mceusb 2-1:0.0: Error: urb status = -71
07:56:13 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:13 executing program 2:
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:13 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:13 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:13 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x58, 0x1c, 0x89, 0x20, 0x41e, 0x4028, 0x618a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0xc, 0x5d}}]}}]}}, 0x0)

07:56:13 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
unshare(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002a80)={&(0x7f00000000c0)=[0x0, 0xd0], 0x2, 0x800, 0x0, <r1=>0xffffffffffffffff})
setns(r1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0xfffffffffffffe95, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1f, 0x101003)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080))
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setns(r0, 0x0)
clone(0x70224100, 0x0, 0x0, 0x0, 0x0)

07:56:13 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  252.605439][   T38] audit: type=1326 audit(1620546973.556:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000
07:56:13 executing program 2:
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:13 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  252.715680][   T38] audit: type=1326 audit(1620546973.556:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000
[  252.736227][ T9753] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  252.796799][ T4846] usb 5-1: new high-speed USB device number 4 using dummy_hcd
07:56:13 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:13 executing program 2:
r0 = socket(0x0, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  252.996336][ T9753] usb 2-1: Using ep0 maxpacket: 16
07:56:14 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  253.056473][ T4846] usb 5-1: Using ep0 maxpacket: 32
[  253.117063][ T9753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.155444][ T9753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  253.230430][ T9753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  253.289270][ T9753] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  253.328418][ T9753] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  253.346559][ T4846] usb 5-1: New USB device found, idVendor=041e, idProduct=4028, bcdDevice=61.8a
[  253.360524][ T4846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.379219][ T4846] usb 5-1: Product: syz
[  253.389263][ T4846] usb 5-1: Manufacturer: syz
[  253.394049][ T4846] usb 5-1: SerialNumber: syz
[  253.403014][ T4846] usb 5-1: config 0 descriptor??
[  253.448419][ T4846] gspca_main: pac207-2.14.0 probing 041e:4028
[  253.456791][ T9753] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  253.465870][ T9753] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  253.496131][ T9753] usb 2-1: Manufacturer: syz
[  253.502701][ T9753] usb 2-1: config 0 descriptor??
[  253.566411][ T4846] gspca_pac207: Failed to read a register (index 0x0000, error -110)
[  253.655733][ T4846] usb 5-1: USB disconnect, device number 4
[  253.856502][ T9753] rc_core: IR keymap rc-hauppauge not found
[  253.863907][ T9753] Registered IR keymap rc-empty
[  253.871602][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  253.926301][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  253.957169][ T9753] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  253.997680][ T9753] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18
[  254.017617][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.046333][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.077073][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.106391][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.146663][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.173518][   T38] audit: type=1326 audit(1620546975.126:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x4665f9 code=0x7ffc0000
[  254.198043][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.216008][   T38] audit: type=1326 audit(1620546975.166:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000
[  254.249712][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.296416][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.326256][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.356547][ T9753] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.388320][ T9753] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  254.397369][ T9753] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  254.427548][ T9753] usb 2-1: USB disconnect, device number 15
07:56:15 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:15 executing program 2:
r0 = socket(0x0, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:15 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:15 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
unshare(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002a80)={&(0x7f00000000c0)=[0x0, 0xd0], 0x2, 0x800, 0x0, <r1=>0xffffffffffffffff})
setns(r1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0xfffffffffffffe95, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1f, 0x101003)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080))
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setns(r0, 0x0)
clone(0x70224100, 0x0, 0x0, 0x0, 0x0)

07:56:15 executing program 4:
unshare(0x400)
r0 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x280)

07:56:15 executing program 1:
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:16 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2})
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x1, r2})
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x1})

07:56:16 executing program 2:
r0 = socket(0x0, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:16 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:16 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2})
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x1, r2})
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x1})

[  255.590770][ T3250] ieee802154 phy0 wpan0: encryption failed: -22
[  255.597527][ T3250] ieee802154 phy1 wpan1: encryption failed: -22
07:56:16 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:16 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:16 executing program 1:
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:17 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x100000003, 0x3c)
r1 = getpgid(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sendto$inet6(r0, &(0x7f0000000000), 0x53e8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x500, 0x140)
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="d40000003100000828bd7000fbdbdf2500000000580001000c001d4db78cb815960008000100697074000c00070008000300760000000c00150008000300ffffff7f0c00200008000300ff7f00000c00090008000300040000000c00000008000300f9ffffff0c000d000800030003000000440001000c0020000800010069707400100013000b0001006d697272656400000c0013000800030000001108dec45948c2d10300000000000c001f0008000300f50900001400010010000a000c000100736b626564697400100001000c001c000800030003000000"], 0xd4}}, 0x20008000)
signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
setresuid(0x0, 0x0, 0xee00)

07:56:17 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:17 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:17 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408c0d220040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0xc, 0xa9, {0xa9, 0x31, "524415fa674344b5336c76afab10c0a374cedfb692954c96dd892ac81054b6853d3d12ba643cd19c830591f76735624cca438b6c89ced8fc9d4e2d4aa9750bacb12e8afcd683e03947ad81f102178ead62ced9bb0dbc9ecedf58f2b3f58c1f4423a694c05e61fc9c810adea629cb323fbdb877133aa189b501ef5d547d54d389601bab099ff27ec2cc7302fde70aa0d973da62ac1681be37cbe6a6f849b339ada346cafae31685"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "a9dc9388"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0xde9}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0x15, 0x2c, "0059e3ee87945cc6001586f4a29b06d9b433844b944cc44d40f5855b9633634b5f055b39fb3b96624375c5f4"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x1, 0xb0, "57695fbffe7695b3156504b8c51a8a9f93997d0aaec4ae310ec977a46d0dfefa0c2ece107350c1ba57b6a2638a1ec47e9cf597ffd066c9f303a2e753d68ac5def5c3d4e1a29d1b49843db4d878927401f84659e7a035d1383752aa43fb9bb339285a552623beb7750cabb903f7610c7f6f02f00ca2e50293a01c6907943911db4dbc94d3e7e0806110bce86ca4326b61411a6f1a61822c41937ef5007e6950eb136d567934171ffd73fdb8e5adcbfdc1"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x23}})
r2 = openat$cgroup_ro(r0, &(0x7f0000000400)='cpuacct.usage_user\x00', 0x0, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000004c0)={0x80, 0x3, 0x4, 0x8, 0x8, {0x77359400}, {0x2, 0xc, 0x4, 0xf7, 0x1, 0xfc, "7af1faff"}, 0x5, 0x2, @fd=r3, 0x7, 0x0, r0})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000440)={0x0, 0xf, 0x70, {0x70, 0x3, "72533521ceb3c319a6132aae4c0f09d88412bd48c8a63c769d24df3863181bdf5c8d26cd0cdf5b1307a2e06077e96645b5997c311fb49ff9efabddb98861b4f1f91d3508e65f2f5e7636e9e019269b98585f74e42b6c1624398fdc11d8e600c09da0730992d547597d899cde34cb"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000700)={0x40, 0x12, 0xb6, "409f41f7017edd12574b79d492ce1a935d268c48358982cc083475fe02c450a31bd62814a460215a64cbfdc65e121d3109545db6d64c9c4cfa8cdb9681f8777ee3cb632c5efea64330f6dca013508bfb20fc0cab039246f57f08614644096a2aed6f0cd64dd282a20b016b8be547cff424c3334ef0ff9ea4fbfd2bab320e98799cb357c02d76e1ddae7fe6c077c88985448b6c7479f6beb45a4c5209a2352d973c87caf482a934d8aaa44e3b5325bdc55f20c7e975e7"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x81, 0x2, ' D'}, &(0x7f00000007c0)={0x20, 0x82, 0x1, "d3"}, &(0x7f0000000800)={0x20, 0x83, 0x1, '%'}, &(0x7f0000000840)={0x20, 0x84, 0x4, "5faec7c7"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "a0cfaf"}})

07:56:17 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:17 executing program 1:
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:17 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:17 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  256.725855][T11166] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
07:56:17 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  256.921552][    T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd
07:56:18 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:18 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:18 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

[  257.318289][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.370249][    T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.397832][    T5] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40
[  257.426490][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.485070][    T5] usb 5-1: config 0 descriptor??
[  257.919014][T11170] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  258.008624][    T5] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  258.041937][    T5] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving
[  258.140963][    T5] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
07:56:20 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000200), &(0x7f0000002000/0x2000)=nil, &(0x7f00009b3000/0x3000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0)
io_uring_enter(r1, 0xa2, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)
shutdown(r5, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r6}}, 0x3)

07:56:20 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:20 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:20 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r8 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:20 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:20 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:20 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:20 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:20 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}}, 0x0)
preadv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/156, 0x9c}], 0x6, 0x9, 0x8)
copy_file_range(r2, &(0x7f00000000c0)=0x1, r1, &(0x7f0000000100)=0xdf9f, 0x1f, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c)
sendto$inet(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r4, &(0x7f0000000040)='|', 0x1, 0x401c005, 0x0, 0x0)
poll(&(0x7f0000000880)=[{r4}, {r4}], 0x2, 0x0)

[  259.585076][   T20] usb 5-1: USB disconnect, device number 5
[  259.701778][T11242] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
07:56:20 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, 0x0, 0x0)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:20 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:20 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:21 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:21 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, 0x0, 0x0)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:21 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x0, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:21 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r8 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:21 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x0, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:21 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:21 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, 0x0, 0x0)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:21 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x29, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x9, [0x6, 0x0, 0x3, 0x1, 0x0]}}, @generic={0x2, 0x53, "48fab5b1f9cc04b4462b54bdbe5faeb31c4cc5bc3f5c7602c9e32ffe6f5a021faec62f0b21bb1fb099bef1f5e96df59cd8f95b6a71a27bc7abd122eab6b251b205b9a2f9617bb10f21111fa363428f53bf94dc"}, @calipso={0x7, 0x58, {0x2, 0x14, 0x1, 0x5, [0x2, 0x7, 0x2, 0x1a, 0xddf, 0x0, 0x2, 0x8, 0x1, 0x4]}}]}, 0x110)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x6)
sendto$inet6(r0, 0x0, 0x0, 0x40, &(0x7f0000000280)={0xa, 0x4e20, 0x27, @local, 0x10001}, 0x1c)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

07:56:21 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x0, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:22 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:22 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, 0x0, 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:22 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r0, &(0x7f0000000000)="db6392dea08cffdc5f307e7dfeb5ee754600e39868fbec78ba746e8c170ddceac0f642dfbcf587f49603", 0x2a, 0x10, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x1}})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

07:56:22 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, 0x0, 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

[  261.546230][    T5] usb 2-1: new high-speed USB device number 16 using dummy_hcd
07:56:22 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:22 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, 0x0, 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f45")

07:56:22 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r8 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:22 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:22 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r0, &(0x7f0000000000)="db6392dea08cffdc5f307e7dfeb5ee754600e39868fbec78ba746e8c170ddceac0f642dfbcf587f49603", 0x2a, 0x10, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x1}})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  261.765259][    T5] usb 2-1: device descriptor read/64, error 18
07:56:22 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  262.086464][    T5] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  262.294842][    T5] usb 2-1: device descriptor read/64, error 18
07:56:23 executing program 5:
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)

07:56:23 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  262.428965][    T5] usb usb2-port1: attempt power cycle
[  262.886239][    T5] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  263.106947][    T5] usb 2-1: device descriptor read/8, error -61
[  263.386162][    T5] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  263.576298][    T5] usb 2-1: device descriptor read/8, error -61
[  263.706428][    T5] usb usb2-port1: unable to enumerate USB device
07:56:25 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:25 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:25 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, 0x0)

07:56:25 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r8 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:25 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:25 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @multicast2}}, 0xffff}, 0x90)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={<r1=>0x0, 0x8865}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={r1, 0x49, "2798b7a84557f73863d4db585bb12c2a481dcd3ffcedf956720ddfe99f66a7261f614024f67f8891b3ff3945969eb6ec7ce16775e6ba56772d7e6c7569c4364975b1943c41524d0ea7"}, &(0x7f0000000100)=0x51)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={<r3=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000001c0)=0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x50)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={r3, 0x7, 0xffff}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000400)=@assoc_value={<r6=>0x0}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r6}, 0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYBLOB="fc0000001841c26ab99565c1bfceded5f82272e33e918fb65817d5ce0d49c0e4c0df40b468d4123c4c5693cc43473fe841eaacaf1f84dc5811994a7f7c2eaff84abcf3a228875e821d8cf92bb7cab9f684ecc67ebe43b4afa3887009afb82bf1dae4d337ceefea3ebce214e1fd7ce7c29e2433666c29a81b41ce7b32bcb1357c3273ab15d53d80bf394c0381a0569cc7268ca1f1b6a5859c04d0458c9ebddbfc61a6c23aab3c95678273a863ce64a6cf5f29b1b468220901bd0e5c3aa278b8bcedfff1e496636b617cec142360306eca70c8dbfc28e1da2aba94dd0d3452334c2b923d7cbbeb6c76eb91238282ad13fb71"], &(0x7f0000000000)=0x104)
sendto$inet6(r0, &(0x7f0000000040)="b7", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)

07:56:25 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, 0x0)

[  264.686299][   T20] usb 2-1: new high-speed USB device number 20 using dummy_hcd
07:56:25 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, 0x0)

[  264.886620][   T20] usb 2-1: device descriptor read/64, error 18
07:56:26 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:26 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040))

[  265.162098][   T20] usb 2-1: new high-speed USB device number 21 using dummy_hcd
07:56:26 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:26 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040))

[  265.376261][   T20] usb 2-1: device descriptor read/64, error 18
[  265.510385][   T20] usb usb2-port1: attempt power cycle
[  265.936271][   T20] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  266.106538][   T20] usb 2-1: device descriptor read/8, error -61
[  266.376289][   T20] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  266.546785][   T20] usb 2-1: device descriptor read/8, error -61
[  266.666746][   T20] usb usb2-port1: unable to enumerate USB device
07:56:28 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r0, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)

07:56:28 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:28 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040))

07:56:28 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:28 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000))
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)

07:56:28 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:28 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ff")

07:56:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r0, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)

[  267.886895][   T20] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  268.076334][   T20] usb 2-1: device descriptor read/64, error 18
07:56:29 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ff")

07:56:29 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ff")

07:56:29 executing program 5:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x20, 0x4)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000)

07:56:29 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  268.366281][   T20] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  268.576194][   T20] usb 2-1: device descriptor read/64, error 18
[  268.696323][   T20] usb usb2-port1: attempt power cycle
[  269.107565][   T20] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  269.276416][   T20] usb 2-1: device descriptor read/8, error -61
[  269.546295][   T20] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  269.746561][   T20] usb 2-1: device descriptor read/8, error -61
[  269.867224][   T20] usb usb2-port1: unable to enumerate USB device
07:56:31 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:31 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:31 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000))
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)

07:56:31 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e14")

07:56:31 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x6}, {0x4c}, {0x6}]})

07:56:31 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, 0x0, &(0x7f0000000000))
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:31 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  270.548396][   T38] audit: type=1326 audit(1620546991.506:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11465 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0
07:56:31 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e14")

07:56:31 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, 0x0, &(0x7f0000000000))
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:31 executing program 5:
unshare(0x2000600)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRK(r0, 0x5414, 0x0)

07:56:31 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e14")

07:56:31 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  270.947454][    T7] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  271.156361][    T7] usb 2-1: device descriptor read/64, error 18
[  271.426453][    T7] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  271.619209][    T7] usb 2-1: device descriptor read/64, error 18
[  271.736437][    T7] usb usb2-port1: attempt power cycle
[  272.156129][    T7] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  272.326243][    T7] usb 2-1: device descriptor read/8, error -61
[  272.616160][    T7] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  272.787106][    T7] usb 2-1: device descriptor read/8, error -61
[  272.909875][    T7] usb usb2-port1: unable to enumerate USB device
07:56:34 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:34 executing program 5:
unshare(0x400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xc008ae88, 0x400000)

07:56:34 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303")

07:56:34 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x10, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:34 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, 0x0, &(0x7f0000000000))
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:34 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000))
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)

07:56:34 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:34 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x48)

07:56:34 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303")

07:56:35 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303")

07:56:35 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040))

[  274.096556][   T20] usb 2-1: new high-speed USB device number 32 using dummy_hcd
07:56:35 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d395")

[  274.319719][   T20] usb 2-1: device descriptor read/64, error 18
[  274.606366][   T20] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  274.816283][   T20] usb 2-1: device descriptor read/64, error 18
[  274.936504][   T20] usb usb2-port1: attempt power cycle
[  275.356247][   T20] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  275.526392][   T20] usb 2-1: device descriptor read/8, error -61
[  275.796348][   T20] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  275.966280][   T20] usb 2-1: device descriptor read/8, error -61
[  276.087563][   T20] usb usb2-port1: unable to enumerate USB device
07:56:37 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:37 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

07:56:37 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d395")

07:56:37 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x10, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:37 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:37 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:37 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d395")

07:56:38 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  277.169518][   T20] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  277.206281][ T9597] usb 2-1: new high-speed USB device number 36 using dummy_hcd
07:56:38 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f")

07:56:38 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f")

[  277.446288][ T9597] usb 2-1: device descriptor read/64, error 18
07:56:38 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
quotactl(0x800002080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)="4122a75a51c4b3099e3b4ab31f2260ffaea29daca0514e1404f51303d3950f")

[  277.644712][   T20] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.692916][   T20] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.729798][ T9597] usb 2-1: new high-speed USB device number 37 using dummy_hcd
07:56:38 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0})

[  277.896723][   T20] usb 6-1: New USB device found, idVendor=046d, idProduct=00fe, bcdDevice= 0.40
[  277.922996][   T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.946317][ T9597] usb 2-1: device descriptor read/64, error 18
[  277.961207][   T20] usb 6-1: Product: syz
[  277.971059][   T20] usb 6-1: Manufacturer: syz
[  277.983196][   T20] usb 6-1: SerialNumber: syz
[  278.066669][ T9597] usb usb2-port1: attempt power cycle
[  278.296536][   T20] usbhid 6-1:1.0: can't add hid device: -22
[  278.302627][   T20] usbhid: probe of 6-1:1.0 failed with error -22
[  278.320364][   T20] usb 6-1: USB disconnect, device number 4
[  278.476159][ T9597] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  278.666570][ T9597] usb 2-1: device descriptor read/8, error -61
[  278.936157][ T9597] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  279.028653][   T20] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  279.106501][ T9597] usb 2-1: device descriptor read/8, error -61
[  279.226597][ T9597] usb usb2-port1: unable to enumerate USB device
[  279.396317][   T20] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.407451][   T20] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.578879][   T20] usb 6-1: New USB device found, idVendor=046d, idProduct=00fe, bcdDevice= 0.40
[  279.593274][   T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.602046][   T20] usb 6-1: Product: syz
[  279.606767][   T20] usb 6-1: Manufacturer: syz
[  279.611473][   T20] usb 6-1: SerialNumber: syz
[  279.876493][   T20] usbhid 6-1:1.0: can't add hid device: -22
[  279.882622][   T20] usbhid: probe of 6-1:1.0 failed with error -22
07:56:40 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:40 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x0, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:40 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:40 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x10, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:40 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000340)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @authinfo={0x18}], 0x30}, 0x0)

07:56:40 executing program 5:
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x80000000)

[  279.919210][   T20] usb 6-1: USB disconnect, device number 5
07:56:41 executing program 5:
io_setup(0x400, &(0x7f0000000000))
io_setup(0x4f, &(0x7f0000001180)=<r0=>0x0)
io_destroy(r0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
io_cancel(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

07:56:41 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:41 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:41 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x0, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  280.419394][ T9753] usb 2-1: new high-speed USB device number 40 using dummy_hcd
07:56:41 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008f73434023380200c2781d02000109021b0a01000000000904000001e5ad0400090581"], 0x0)

07:56:41 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

[  280.719034][ T9753] usb 2-1: Using ep0 maxpacket: 16
[  280.836465][ T9753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  280.851445][ T9753] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  280.946399][    T5] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  280.946434][ T9753] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  280.976099][ T9753] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  280.984251][ T9753] usb 2-1: Manufacturer: syz
[  281.027959][ T9753] usb 2-1: config 0 descriptor??
[  281.346688][    T5] usb 6-1: config index 0 descriptor too short (expected 2587, got 27)
[  281.355101][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 568, setting to 64
[  281.498028][    T5] usb 6-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=78.c2
[  281.522319][    T5] usb 6-1: New USB device strings: Mfr=29, Product=2, SerialNumber=0
[  281.541736][    T5] usb 6-1: Product: syz
[  281.547757][    T5] usb 6-1: Manufacturer: syz
[  281.570914][    T5] usb 6-1: config 0 descriptor??
[  281.827398][    T5] usbtouchscreen: probe of 6-1:0.0 failed with error -71
[  281.849224][    T5] usb 6-1: USB disconnect, device number 6
[  282.596174][ T9753] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  282.786540][ T9753] usb 6-1: device descriptor read/64, error 18
07:56:44 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:44 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x0, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:44 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:44 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:44 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

[  283.037658][    T7] usb 2-1: USB disconnect, device number 40
[  283.066329][ T9753] usb 6-1: new high-speed USB device number 8 using dummy_hcd
07:56:44 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:44 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  283.256204][ T9753] usb 6-1: device descriptor read/64, error 18
[  283.376648][ T9753] usb usb6-port1: attempt power cycle
07:56:44 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:44 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  283.616501][    T7] usb 2-1: new high-speed USB device number 41 using dummy_hcd
07:56:44 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:44 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001040)={'wg0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="4a8b5a401b36f33ffef450aa3166fc4b0ddbe6e5", 0x14, 0x0, &(0x7f0000001080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

07:56:44 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

[  283.886123][    T7] usb 2-1: Using ep0 maxpacket: 16
[  284.026576][    T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  284.062716][    T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  284.186303][    T7] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  284.195408][    T7] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  284.211867][    T7] usb 2-1: Manufacturer: syz
[  284.223212][    T7] usb 2-1: config 0 descriptor??
07:56:47 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:47 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x24, r1, 0x221, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

07:56:47 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:47 executing program 0:
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:47 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

[  286.184056][ T9754] usb 2-1: USB disconnect, device number 41
[  286.259941][T11763] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[  286.295831][T11763] tc_dump_action: action bad kind
07:56:47 executing program 0:
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:47 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:47 executing program 0:
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:47 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  286.717327][ T9754] usb 2-1: new high-speed USB device number 42 using dummy_hcd
07:56:47 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)

07:56:47 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

[  286.956896][ T9754] usb 2-1: Using ep0 maxpacket: 16
[  286.981116][T11772] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[  287.006628][T11772] tc_dump_action: action bad kind
[  287.076724][ T9754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.109817][ T9754] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  287.246639][ T9754] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  287.255835][ T9754] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  287.292075][ T9754] usb 2-1: Manufacturer: syz
[  287.303849][ T9754] usb 2-1: config 0 descriptor??
07:56:50 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:50 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:50 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)

07:56:50 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:50 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:50 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x51}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)

[  289.334735][   T20] usb 2-1: USB disconnect, device number 42
07:56:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

07:56:50 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:50 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)

07:56:50 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

07:56:50 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

[  289.846247][   T20] usb 2-1: new high-speed USB device number 43 using dummy_hcd
07:56:50 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

[  290.086250][   T20] usb 2-1: Using ep0 maxpacket: 16
[  290.206650][   T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.218471][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  290.248445][   T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  290.274613][T11836] gretap0: refused to change device tx_queue_len
[  290.292761][T11836] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  290.366502][   T20] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  290.375634][   T20] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  290.397098][   T20] usb 2-1: Manufacturer: syz
[  290.418057][T11852] gretap0: refused to change device tx_queue_len
[  290.428698][   T20] usb 2-1: config 0 descriptor??
[  290.434376][T11852] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
07:56:53 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:53 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

07:56:53 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:53 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:53 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  292.440445][ T9754] usb 2-1: USB disconnect, device number 43
07:56:53 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:53 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

07:56:53 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

07:56:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:56:53 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

[  292.986212][ T9754] usb 2-1: new high-speed USB device number 44 using dummy_hcd
07:56:54 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x20000050)

[  293.236311][ T9754] usb 2-1: Using ep0 maxpacket: 16
[  293.356629][ T9754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.378725][ T9754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  293.410241][ T9754] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  293.506348][ T9754] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  293.515578][ T9754] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  293.526349][ T9754] usb 2-1: Manufacturer: syz
[  293.533212][ T9754] usb 2-1: config 0 descriptor??
07:56:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:56:56 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

07:56:56 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0)

07:56:56 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:56 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:56:56 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

[  295.592966][ T9726] usb 2-1: USB disconnect, device number 44
07:56:56 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

07:56:56 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0)

07:56:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  296.086112][ T9726] usb 2-1: new high-speed USB device number 45 using dummy_hcd
07:56:57 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:57 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0)

[  296.326985][ T9726] usb 2-1: Using ep0 maxpacket: 16
07:56:57 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000010000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x0, 0x0, 0xaa, {0xaa, 0x0, "24c668a59b4aa01e8aaa8e4370944a42454e234a066ae90804f8435ab2877dd601668a0b0578b7dd66416cfc1099991e4cdb41ee27857bdc03d963ca7aee7c6cc47a7fbca447050525f886d0b5326adda4dc1d9f429ec008895b8b14c4f47bd499a573452bf96b9236467b33d777ab3cde5b1f6625825982f77055badf68371af99d6fe5053b79d247c2528730070cc0f5b1bca197c2aef0b20dd9f9788c2d6f005258c19bdccfd2"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

07:56:57 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  296.449420][ T9726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.490077][ T9726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
07:56:57 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:57 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  296.536295][ T9726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
07:56:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:56:57 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  296.646708][ T9726] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  296.658971][ T9726] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  296.689514][ T9726] usb 2-1: Manufacturer: syz
[  296.746340][   T20] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  296.751806][ T9726] usb 2-1: config 0 descriptor??
[  297.037034][   T20] usb 1-1: Using ep0 maxpacket: 16
[  297.184219][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.220770][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.253012][   T20] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  297.339029][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.349659][   T20] usb 1-1: config 0 descriptor??
[  297.829912][   T20] hid (null): bogus close delimiter
[  297.835210][   T20] hid (null): unknown global tag 0xc
[  297.856332][   T20] hid (null): nested delimiters
[  297.861426][   T20] hid (null): unknown global tag 0xd
[  297.870754][   T20] hid (null): unknown global tag 0x55
[  297.891910][   T20] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0003/input/input20
[  297.932504][   T20] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0003/input/input21
[  298.029906][   T20] kye 0003:0458:5019.0003: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0
[  298.075397][   T20] usb 1-1: USB disconnect, device number 4
07:56:59 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:56:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:56:59 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:56:59 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:56:59 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, 0x0, 0x0, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  298.719459][ T9706] usb 2-1: USB disconnect, device number 45
[  298.806599][    T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd
07:56:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  299.066278][    T7] usb 1-1: Using ep0 maxpacket: 16
[  299.186788][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.219583][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.247807][    T7] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  299.266727][ T9706] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  299.274891][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.313942][    T7] usb 1-1: config 0 descriptor??
07:57:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:00 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:57:00 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, 0x0, 0x0, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:57:00 executing program 4:
pipe(&(0x7f0000000300))
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

[  299.506441][ T9706] usb 2-1: Using ep0 maxpacket: 16
07:57:00 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000010000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x0, 0x0, 0xaa, {0xaa, 0x0, "24c668a59b4aa01e8aaa8e4370944a42454e234a066ae90804f8435ab2877dd601668a0b0578b7dd66416cfc1099991e4cdb41ee27857bdc03d963ca7aee7c6cc47a7fbca447050525f886d0b5326adda4dc1d9f429ec008895b8b14c4f47bd499a573452bf96b9236467b33d777ab3cde5b1f6625825982f77055badf68371af99d6fe5053b79d247c2528730070cc0f5b1bca197c2aef0b20dd9f9788c2d6f005258c19bdccfd2"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[  299.626498][    T7] usbhid 1-1:0.0: can't add hid device: -71
[  299.633769][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  299.649817][    T7] usbhid: probe of 1-1:0.0 failed with error -71
[  299.660259][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  299.683135][    T7] usb 1-1: USB disconnect, device number 5
[  299.695479][ T9706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
07:57:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  299.806595][ T9706] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  299.815691][ T9706] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  299.933922][ T9706] usb 2-1: Manufacturer: syz
[  299.973826][ T9706] usb 2-1: config 0 descriptor??
[  300.082138][    T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  300.346158][    T7] usb 1-1: Using ep0 maxpacket: 16
[  300.504716][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.526417][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.550569][    T7] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  300.567036][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.581715][    T7] usb 1-1: config 0 descriptor??
[  301.167540][    T7] hid (null): bogus close delimiter
[  301.174584][    T7] hid (null): unknown global tag 0xc
[  301.182620][    T7] hid (null): nested delimiters
[  301.189478][    T7] hid (null): unknown global tag 0xd
[  301.195109][    T7] hid (null): unknown global tag 0x55
[  301.226250][    T7] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0004/input/input22
[  301.260366][    T7] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0004/input/input23
[  301.360844][    T7] kye 0003:0458:5019.0004: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0
[  301.397000][    T7] usb 1-1: USB disconnect, device number 6
07:57:02 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:02 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:57:02 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, 0x0, 0x0, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:57:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:02 executing program 4:
pipe(&(0x7f0000000300))
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

[  301.857140][ T9706] usb 2-1: USB disconnect, device number 46
07:57:03 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'})
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

07:57:03 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:57:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  302.241261][T12206] input: syz1 as /devices/virtual/input/input24
[  302.416200][ T9706] usb 2-1: new high-speed USB device number 47 using dummy_hcd
07:57:03 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'})
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

07:57:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  302.696301][ T9706] usb 2-1: Using ep0 maxpacket: 16
07:57:03 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  302.794652][T12227] input: syz1 as /devices/virtual/input/input26
07:57:03 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

[  302.836848][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  302.883199][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  302.949564][ T9706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  303.056498][ T9706] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  303.065875][ T9706] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  303.096158][ T9706] usb 2-1: Manufacturer: syz
[  303.112937][ T9706] usb 2-1: config 0 descriptor??
07:57:05 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:05 executing program 4:
pipe(&(0x7f0000000300))
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:05 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002c80)={0x0, 0x20, &(0x7f0000002bc0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @broadcast}]}, &(0x7f0000002cc0)=0x10)

07:57:05 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:57:05 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  304.985274][   T20] usb 2-1: USB disconnect, device number 47
07:57:06 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

07:57:06 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  305.536567][   T20] usb 2-1: new high-speed USB device number 48 using dummy_hcd
07:57:06 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  305.778759][   T20] usb 2-1: Using ep0 maxpacket: 16
07:57:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  305.906263][   T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.938652][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  305.969245][   T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  306.083945][   T20] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  306.101801][   T20] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  306.113228][   T20] usb 2-1: Manufacturer: syz
[  306.131609][   T20] usb 2-1: config 0 descriptor??
07:57:09 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:09 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

07:57:09 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:57:09 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:09 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r5}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:09 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  308.125304][ T9726] usb 2-1: USB disconnect, device number 48
07:57:09 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
exit_group(0x0)

07:57:09 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

07:57:09 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

07:57:09 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:57:09 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
exit_group(0x0)

07:57:09 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  308.706366][ T9726] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  308.956185][ T9726] usb 2-1: Using ep0 maxpacket: 16
[  309.076602][ T9726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.092652][ T9726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  309.118619][ T9726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  309.216634][ T9726] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  309.225737][ T9726] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  309.245862][ T9726] usb 2-1: Manufacturer: syz
[  309.266920][ T9726] usb 2-1: config 0 descriptor??
07:57:12 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:12 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

07:57:12 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
exit_group(0x0)

07:57:12 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x68}}, 0x0)

07:57:12 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r5}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:12 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

[  311.264960][ T9706] usb 2-1: USB disconnect, device number 49
07:57:12 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:12 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x5c}}, 0x0)

07:57:12 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

07:57:12 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:57:12 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:57:12 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  311.924290][ T9706] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  312.206188][ T9706] usb 2-1: Using ep0 maxpacket: 16
[  312.326295][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.356065][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  312.396230][ T9706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  312.504999][ T9706] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  312.526377][ T9706] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  312.540077][ T9706] usb 2-1: Manufacturer: syz
[  312.561793][ T9706] usb 2-1: config 0 descriptor??
07:57:15 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:15 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r5}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:15 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}]}, 0x54}}, 0x0)

07:57:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:15 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

07:57:15 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  314.415774][ T9706] usb 2-1: USB disconnect, device number 50
07:57:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:15 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

07:57:15 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:15 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

07:57:15 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  315.108680][ T9706] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  315.416188][ T9706] usb 2-1: Using ep0 maxpacket: 16
[  315.556504][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.583265][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  315.605823][ T9706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  315.746911][ T9706] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  315.756164][ T9706] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  315.764182][ T9706] usb 2-1: Manufacturer: syz
[  315.777635][ T9706] usb 2-1: config 0 descriptor??
[  317.036965][ T3250] ieee802154 phy0 wpan0: encryption failed: -22
[  317.044255][ T3250] ieee802154 phy1 wpan1: encryption failed: -22
07:57:18 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:18 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

07:57:18 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:18 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

07:57:18 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0)

07:57:18 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

[  317.570470][ T9726] usb 2-1: USB disconnect, device number 51
07:57:18 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:18 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

07:57:18 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

07:57:18 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

07:57:18 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:19 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  318.106392][ T9726] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  318.356207][ T9726] usb 2-1: Using ep0 maxpacket: 16
[  318.476627][ T9726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.499676][ T9726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  318.519661][ T9726] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  318.538813][ T9726] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  318.656583][ T9726] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  318.665700][ T9726] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  318.680843][ T9726] usb 2-1: Manufacturer: syz
[  318.690569][ T9726] usb 2-1: config 0 descriptor??
07:57:21 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:21 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:21 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

07:57:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:21 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

[  320.701596][   T20] usb 2-1: USB disconnect, device number 52
07:57:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x24}}, 0x0)

07:57:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:21 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

07:57:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:22 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:22 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  321.247487][   T20] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  321.487287][   T20] usb 2-1: Using ep0 maxpacket: 16
[  321.626586][   T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.637695][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  321.649688][   T20] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  321.661247][   T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  321.766585][   T20] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  321.776437][   T20] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  321.784466][   T20] usb 2-1: Manufacturer: syz
[  321.801429][   T20] usb 2-1: config 0 descriptor??
07:57:24 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x8f, 0x7f, 0x30}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:24 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:24 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

07:57:24 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x24}}, 0x0)

[  323.846187][ T9754] usb 2-1: USB disconnect, device number 53
07:57:25 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:25 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:57:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:25 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  324.346320][ T9706] usb 2-1: new high-speed USB device number 54 using dummy_hcd
07:57:25 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:57:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  324.596634][ T9706] usb 2-1: Using ep0 maxpacket: 16
[  324.716887][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.741123][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  324.795643][ T9706] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  324.842871][ T9706] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  324.936761][ T9706] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  324.951062][ T9706] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  324.965205][ T9706] usb 2-1: Manufacturer: syz
[  324.990389][ T9706] usb 2-1: config 0 descriptor??
07:57:27 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x24}}, 0x0)

07:57:27 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:27 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x3c}}, 0x0)

07:57:27 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r8 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  327.001000][ T4846] usb 2-1: USB disconnect, device number 54
07:57:28 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:28 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0)

07:57:28 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x24}}, 0x0)

07:57:28 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r8 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

[  327.486825][ T4846] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  327.738841][ T4846] usb 2-1: Using ep0 maxpacket: 16
[  327.856561][ T4846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.876215][ T4846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  327.906299][ T4846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  327.926109][ T4846] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  327.935832][ T4846] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  328.026622][ T4846] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  328.043200][ T4846] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  328.054647][ T4846] usb 2-1: Manufacturer: syz
[  328.063402][ T4846] usb 2-1: config 0 descriptor??
[  328.453756][ T4846] rc_core: IR keymap rc-hauppauge not found
[  328.464583][ T4846] Registered IR keymap rc-empty
[  328.478925][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.518293][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.551036][ T4846] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  328.579335][ T4846] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27
[  328.605088][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.637756][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.666277][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.696420][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.726314][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.757969][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.786495][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.816546][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.847657][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.876427][ T4846] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  328.907206][ T4846] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  328.916307][ T4846] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  328.984466][ T9706] usb 2-1: USB disconnect, device number 55
[  329.346213][ T4846] Bluetooth: hci0: command 0x0406 tx timeout
[  329.352604][ T4846] Bluetooth: hci3: command 0x0406 tx timeout
[  329.356151][ T9706] Bluetooth: hci2: command 0x0406 tx timeout
[  329.367696][ T4846] Bluetooth: hci4: command 0x0406 tx timeout
[  329.374040][ T4846] Bluetooth: hci5: command 0x0406 tx timeout
[  329.381411][ T4846] Bluetooth: hci1: command 0x0406 tx timeout
07:57:30 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:30 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x5)
tkill(0x0, 0x34)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:30 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0)

07:57:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:30 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)

07:57:30 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r8 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:30 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0)

07:57:30 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x5)
tkill(0x0, 0x34)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:30 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:30 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45)
recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0xbb}, {&(0x7f0000000300)=""/170, 0xd4}, {&(0x7f0000000e00)=""/96, 0xb4}, {&(0x7f0000000600)=""/204, 0x54c}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0)

07:57:30 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

07:57:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  329.966331][   T20] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  330.216379][   T20] usb 2-1: Using ep0 maxpacket: 16
[  330.342417][   T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  330.368279][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  330.382059][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  330.393541][   T20] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  330.404514][   T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  330.496477][   T20] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  330.496532][   T20] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  330.496560][   T20] usb 2-1: Manufacturer: syz
[  330.498928][   T20] usb 2-1: config 0 descriptor??
[  330.886197][   T20] rc_core: IR keymap rc-hauppauge not found
[  330.892185][   T20] Registered IR keymap rc-empty
[  330.901902][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.956205][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.986864][   T20] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  331.011585][   T20] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28
[  331.050558][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.096330][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.126357][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.159490][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.196331][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.230978][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.270406][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.306365][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.336303][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.367493][   T20] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  331.397828][   T20] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  331.407967][   T20] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  331.446070][    C1] mceusb 2-1:0.0: Error: urb status = -71
[  331.453142][   T20] usb 2-1: USB disconnect, device number 56
07:57:32 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:32 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x5)
tkill(0x0, 0x34)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:32 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:32 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000076000/0x2000)=nil], &(0x7f0000000040), 0xffffffffffffffff, 0x0)

07:57:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:32 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

07:57:33 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000004c0)='Bd~')

07:57:33 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:33 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:33 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

07:57:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "616e994032d02b0b"}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x3}]}, 0x34}}, 0x0)

[  332.456195][ T9754] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  332.706919][ T9754] usb 2-1: Using ep0 maxpacket: 16
[  332.826407][ T9754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.836760][ T9754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  332.850046][ T9754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  332.861145][ T9754] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  332.872144][ T9754] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  332.966497][ T9754] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  332.984812][ T9754] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  333.003467][ T9754] usb 2-1: Manufacturer: syz
[  333.013464][ T9754] usb 2-1: config 0 descriptor??
[  333.396256][ T9754] rc_core: IR keymap rc-hauppauge not found
[  333.402271][ T9754] Registered IR keymap rc-empty
[  333.419585][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.469975][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.506840][ T9754] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  333.537085][ T9754] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29
[  333.565184][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.606267][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.636709][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.666238][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.696824][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.736468][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.766250][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.799209][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.836517][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.866252][ T9754] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  333.898897][ T9754] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  333.911387][ T9754] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  333.947220][ T9754] usb 2-1: USB disconnect, device number 57
07:57:35 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

07:57:35 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:35 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24c, r1, 0x301, 0x0, 0x0, {0x7}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "435dcd45778b353f79f68a6f604164db4bde3f1ebdceb2d2a8f60ae4675a"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a4030c11f6f5940f06b01e8db5317cc82b8567708c7350dfb5a680c45b61d5e6645d"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "dc432376d0a1eb062e767ea51eb8e9bf51b999df7c5c6f8f338eea825b293d8d77913028f50b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "67dd28d6828bc0a12751b3a03397e8d77b5c4b95daa400599b64eab082f8935287"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x748b9de39eacfa16}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x24c}}, 0x20000000)

07:57:35 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x3c}}, 0x0)

07:57:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:35 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  334.545488][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
07:57:35 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

[  334.601930][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
07:57:35 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x3c}}, 0x0)

[  334.678561][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
07:57:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  334.719131][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
07:57:35 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:35 executing program 2:
write(0xffffffffffffffff, &(0x7f00000000c0)="2400009010e057c24042d58bee2d68b543", 0x11)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', <r2=>0x0})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={@local, 0x0, r2})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
close(r0)

[  334.912191][T12979] ptrace attach of "/root/syz-executor.0"[12977] was attempted by "/root/syz-executor.0"[12979]
[  334.923449][    T5] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  335.204596][    T5] usb 2-1: Using ep0 maxpacket: 16
[  335.356547][    T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  335.380514][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  335.416200][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  335.450636][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  335.495537][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  335.596343][    T5] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  335.605528][    T5] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  335.616277][    T5] usb 2-1: Manufacturer: syz
[  335.637605][    T5] usb 2-1: config 0 descriptor??
[  336.016117][    T5] rc_core: IR keymap rc-hauppauge not found
[  336.022664][    T5] Registered IR keymap rc-empty
[  336.040683][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.096147][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.127033][    T5] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  336.153776][    T5] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30
[  336.197420][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.236257][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.276957][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.316605][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.346346][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.386323][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.416700][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.446220][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.486980][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.518723][    T5] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  336.559421][    T5] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  336.567856][    T5] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  336.610785][    T5] usb 2-1: USB disconnect, device number 58
[  336.617088][    C0] mceusb 2-1:0.0: Error: urb status = -71
07:57:38 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:38 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:38 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x3c}}, 0x0)

07:57:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0xc62f98480d383858}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:38 executing program 1:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="8ea19286aec01b382f8b624fc4319af1d29100bfc19b3a6542e3b2a323c0c5a649184e5489b58bbe4bfce9930130a5db32473968800a9d8e68498d68d7867f7ae714adbc23f515385b1556e6f0fe0e46c0f7fe9339639f0c"])

[  337.223220][T13042] ptrace attach of "/root/syz-executor.0"[13039] was attempted by "/root/syz-executor.0"[13042]
07:57:38 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:38 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

[  337.323601][T13043] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:57:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:38 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  337.401389][T13060] ptrace attach of "/root/syz-executor.0"[13058] was attempted by "/root/syz-executor.0"[13060]
07:57:38 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

[  337.490809][T13063] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
07:57:38 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080))

[  337.626204][ T9706] usb 2-1: new high-speed USB device number 59 using dummy_hcd
07:57:38 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0)

07:57:38 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6e9fb045703260af3160df0d610b5da6bdf2d1eaa302ab6c2fef230d003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d", 0x79}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

07:57:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:38 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa8}}, 0x810)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8)
getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getroute={0xcc, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0x0, 0x3, 0xcb, 0x5, 0x3d00}, [@RTA_VIA={0x14, 0x12, {0x1f, "4147fb3bf057c670daafe78360e5"}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x6}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x75e}, {0xce7, 0x0, 0x1}, {0x1147, 0x0, 0x1}, {0x400}, {0xdc2}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8001}, {0x401, 0x0, 0x1}, {0x1d15, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x4}, {0x4}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb9e, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9000, 0x0, 0x1}, {0x3f1c}, {0xd8}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff81}, {0x3f}, {0x571f, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3a, 0x608003)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)

07:57:38 executing program 2:
unshare(0x4000400)
pipe(&(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10)

[  337.896195][ T9706] usb 2-1: Using ep0 maxpacket: 16
[  338.018085][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.037412][ T9754] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  338.043101][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  338.097628][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  338.117635][ T9706] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  338.138054][ T9706] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  338.253332][ T9706] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  338.264855][ T9706] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  338.282695][ T9706] usb 2-1: Manufacturer: syz
[  338.294318][ T9706] usb 2-1: config 0 descriptor??
[  338.406350][ T9754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.417812][ T9754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.430628][ T9754] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40
[  338.441068][ T9754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.452617][ T9754] usb 4-1: config 0 descriptor??
[  338.636405][ T9706] rc_core: IR keymap rc-hauppauge not found
[  338.642818][ T9706] Registered IR keymap rc-empty
[  338.657160][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  338.696387][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  338.736760][ T9706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  338.767267][ T9706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31
[  338.806308][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  338.840854][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  338.886356][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  338.936353][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  338.976299][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  339.016281][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  339.057027][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  339.086156][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  339.126299][ T9706] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  339.142344][ T4846] usb 4-1: USB disconnect, device number 2
[  339.153479][ T4846] general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN
[  339.165264][ T4846] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f]
[  339.173691][ T4846] CPU: 1 PID: 4846 Comm: kworker/1:3 Not tainted 5.12.0-syzkaller #0
[  339.181782][ T4846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  339.191899][ T4846] Workqueue: usb_hub_wq hub_event
[  339.197021][ T4846] RIP: 0010:timer_is_static_object+0x20/0x90
[  339.203122][ T4846] Code: 84 00 00 00 00 00 0f 1f 40 00 41 54 53 48 89 fb e8 75 1a 11 00 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 4f 45 31 e4 48 83 7b 08 00 74 0c e8 4b 1a 11 00 44
[  339.222841][ T4846] RSP: 0018:ffffc9000168f330 EFLAGS: 00010006
[  339.228940][ T4846] RAX: dffffc0000000000 RBX: 0000000000000150 RCX: ffffc90016867000
[  339.236932][ T4846] RDX: 000000000000002b RSI: ffffffff8163a83b RDI: 0000000000000158
[  339.244930][ T4846] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffff908f916b
[  339.252939][ T4846] R10: fffffbfff211f22d R11: 0000000000000000 R12: dffffc0000000000
[  339.260968][ T4846] R13: ffffffff896d9920 R14: 0000000000000150 R15: 1ffff920002d1e6b
[  339.269075][ T4846] FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[  339.278041][ T4846] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  339.284673][ T4846] CR2: 0000001b33727000 CR3: 000000002f008000 CR4: 00000000001506e0
[  339.292691][ T4846] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  339.300679][ T4846] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  339.308669][ T4846] Call Trace:
[  339.311956][ T4846]  debug_object_assert_init+0x1df/0x2e0
[  339.317626][ T4846]  ? debug_object_free+0x350/0x350
[  339.322797][ T4846]  ? __lock_acquire+0x16a7/0x5230
[  339.327977][ T4846]  del_timer+0x6d/0x110
[  339.332197][ T4846]  ? detach_if_pending+0x470/0x470
[  339.341414][ T4846]  ? try_to_grab_pending+0xbd/0xd0
[  339.346614][ T4846]  ? lockdep_hardirqs_off+0x90/0xd0
[  339.351871][ T4846]  try_to_grab_pending+0x6d/0xd0
[  339.356861][ T4846]  __cancel_work_timer+0xa6/0x570
[  339.361910][ T4846]  ? try_to_grab_pending+0xd0/0xd0
[  339.367049][ T4846]  ? mark_held_locks+0x9f/0xe0
[  339.371928][ T4846]  ? _raw_spin_unlock_irqrestore+0x50/0x70
[  339.377842][ T4846]  ? lockdep_hardirqs_on+0x79/0x100
[  339.383076][ T4846]  magicmouse_remove+0x3a/0x50
[  339.387945][ T4846]  hid_device_remove+0xed/0x240
[  339.392915][ T4846]  ? magicmouse_raw_event+0x1020/0x1020
[  339.398600][ T4846]  ? hid_register_report+0x3b0/0x3b0
[  339.403912][ T4846]  __device_release_driver+0x3bd/0x6f0
[  339.409479][ T4846]  device_release_driver+0x26/0x40
[  339.414619][ T4846]  bus_remove_device+0x2eb/0x5a0
[  339.419583][ T4846]  device_del+0x502/0xd40
[  339.423941][ T4846]  ? __device_links_queue_sync_state+0x3f0/0x3f0
[  339.430296][ T4846]  ? mark_held_locks+0x9f/0xe0
[  339.435084][ T4846]  ? rwlock_bug.part.0+0x90/0x90
[  339.440054][ T4846]  hid_destroy_device+0xe1/0x150
[  339.445024][ T4846]  usbhid_disconnect+0x9f/0xe0
[  339.449880][ T4846]  usb_unbind_interface+0x1d8/0x8d0
[  339.455157][ T4846]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[  339.460972][ T4846]  ? kernfs_remove_by_name_ns+0x62/0xb0
[  339.466605][ T4846]  ? usb_unbind_device+0x1a0/0x1a0
[  339.471741][ T4846]  __device_release_driver+0x3bd/0x6f0
[  339.477227][ T4846]  device_release_driver+0x26/0x40
[  339.482371][ T4846]  bus_remove_device+0x2eb/0x5a0
[  339.487348][ T4846]  device_del+0x502/0xd40
[  339.491714][ T4846]  ? __device_links_queue_sync_state+0x3f0/0x3f0
[  339.498075][ T4846]  ? kobject_put+0x1f3/0x540
[  339.502834][ T4846]  usb_disable_device+0x35b/0x7b0
[  339.507897][ T4846]  usb_disconnect.cold+0x27d/0x791
[  339.513086][ T4846]  hub_event+0x1c9c/0x4330
[  339.517540][ T4846]  ? hub_port_debounce+0x3c0/0x3c0
[  339.522681][ T4846]  ? lock_release+0x720/0x720
[  339.527389][ T4846]  ? lock_downgrade+0x6e0/0x6e0
[  339.532275][ T4846]  ? do_raw_spin_lock+0x120/0x2b0
[  339.537329][ T4846]  process_one_work+0x98d/0x1600
[  339.542306][ T4846]  ? pwq_dec_nr_in_flight+0x320/0x320
[  339.547711][ T4846]  ? rwlock_bug.part.0+0x90/0x90
[  339.552674][ T4846]  ? _raw_spin_lock_irq+0x41/0x50
[  339.557733][ T4846]  worker_thread+0x64c/0x1120
[  339.562445][ T4846]  ? __kthread_parkme+0x13f/0x1e0
[  339.567846][ T4846]  ? process_one_work+0x1600/0x1600
[  339.573076][ T4846]  kthread+0x3b1/0x4a0
[  339.577265][ T4846]  ? __kthread_bind_mask+0xc0/0xc0
[  339.582428][ T4846]  ret_from_fork+0x1f/0x30
[  339.586961][ T4846] Modules linked in:
[  339.590883][ T4846] ---[ end trace 6e4b28349d8a89fc ]---
[  339.596343][ T4846] RIP: 0010:timer_is_static_object+0x20/0x90
[  339.602528][ T4846] Code: 84 00 00 00 00 00 0f 1f 40 00 41 54 53 48 89 fb e8 75 1a 11 00 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 4f 45 31 e4 48 83 7b 08 00 74 0c e8 4b 1a 11 00 44
[  339.626150][ T4846] RSP: 0018:ffffc9000168f330 EFLAGS: 00010006
[  339.632236][ T4846] RAX: dffffc0000000000 RBX: 0000000000000150 RCX: ffffc90016867000
[  339.642075][ T4846] RDX: 000000000000002b RSI: ffffffff8163a83b RDI: 0000000000000158
[  339.651718][ T4846] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffff908f916b
[  339.659970][ T4846] R10: fffffbfff211f22d R11: 0000000000000000 R12: dffffc0000000000
[  339.667963][ T4846] R13: ffffffff896d9920 R14: 0000000000000150 R15: 1ffff920002d1e6b
[  339.675956][ T4846] FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[  339.684914][ T4846] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  339.691541][ T4846] CR2: 0000001b33727000 CR3: 000000002f008000 CR4: 00000000001506e0
[  339.699563][ T4846] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  339.707763][ T4846] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  339.715767][ T4846] Kernel panic - not syncing: Fatal exception
[  339.722508][ T4846] Kernel Offset: disabled
[  339.727176][ T4846] Rebooting in 86400 seconds..