MOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:03 executing program 5: sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="00000000000000e8ad7a3c000000080049d50300fc7cdb84e8"], 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffd33) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) pipe2$9p(0x0, 0x0) r4 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="d0c10f01d10fdc08c4e28d935c85ab0f01c4c74424000001c0fec744240217030000c7442406000000000f0114240f353e640fc735a825903c660f3a42a752000000dd0f2000", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:48:03 executing program 1: creat(&(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 16:48:04 executing program 1: syslog(0x3, &(0x7f00000000c0)=""/4096, 0x1000) 16:48:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) [ 313.213639][ T3883] udevd[3883]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:48:04 executing program 5: sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="00000000000000e8ad7a3c000000080049d50300fc7cdb84e8"], 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffd33) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) pipe2$9p(0x0, 0x0) r4 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="d0c10f01d10fdc08c4e28d935c85ab0f01c4c74424000001c0fec744240217030000c7442406000000000f0114240f353e640fc735a825903c660f3a42a752000000dd0f2000", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:48:04 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:48:04 executing program 1: syslog(0x3, &(0x7f00000000c0)=""/4096, 0x1000) 16:48:05 executing program 0: syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x6313, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:05 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x18}, 0xc) 16:48:05 executing program 5: sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="00000000000000e8ad7a3c000000080049d50300fc7cdb84e8"], 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffd33) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) pipe2$9p(0x0, 0x0) r4 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="d0c10f01d10fdc08c4e28d935c85ab0f01c4c74424000001c0fec744240217030000c7442406000000000f0114240f353e640fc735a825903c660f3a42a752000000dd0f2000", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:48:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:05 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x1000000) 16:48:05 executing program 1: symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x30e813c8757051e4) 16:48:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40049409, 0x0) 16:48:05 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000500)=[{&(0x7f0000000440)="c877e774a815b581", 0x8, 0x1}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f7, 0x9}, {&(0x7f0000010000)="200000004000000003000000aa0000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000000200)="78326e784844e26aeec76819635f1607fa2e65a8b5f1f5ff12dad1b01dde2fd043601c778f66f59479f92dc3b22af360bb3381ce1e49a704d72cae634cac233195315c28b966", 0x46, 0xe8a}, {&(0x7f0000000640)="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", 0x113, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x14, &(0x7f0000000300)=ANY=[], 0x0) chdir(&(0x7f00000001c0)='./file0\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='./file0\x00') 16:48:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r2, 0x0, 0x50) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 314.725145][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 314.800842][ T5663] loop1: detected capacity change from 0 to 512 [ 314.826505][ T5663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 16:48:05 executing program 5: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) [ 314.870872][ T5663] EXT4-fs error (device loop1): __ext4_new_inode:1071: comm syz-executor.1: reserved inode found cleared - inode=1 [ 314.932205][ T3638] EXT4-fs (loop1): unmounting filesystem. 16:48:06 executing program 0: syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x6313, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000007"], &(0x7f0000000240)=""/169, 0x9b, 0xa9, 0x1}, 0x20) 16:48:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:06 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x8, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:06 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 16:48:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x3, 0x0, 0x0, 0x3, 0x3, [], "96a5c1"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000003c0)=""/178, 0x38, 0xb2, 0x1}, 0x20) 16:48:06 executing program 1: mkdir(&(0x7f0000000ac0)='./file0\x00', 0x0) unlink(&(0x7f0000000100)='./file0\x00') 16:48:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x1}) 16:48:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0x3, 0x3, [], "96a5c1"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}}, &(0x7f00000003c0)=""/178, 0x36, 0xb2, 0x1}, 0x20) [ 316.970490][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.976795][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 16:48:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x6313, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:08 executing program 1: socketpair(0x11, 0xa, 0xffffff95, &(0x7f0000000100)) 16:48:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0xf0ff7f00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) 16:48:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:08 executing program 5: syz_clone(0x8200080, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0) 16:48:08 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 16:48:08 executing program 1: syz_clone(0xa7803300, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x8, 0x0, 0x6}]}}, &(0x7f0000000580)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 317.444713][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:48:08 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x1f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:08 executing program 1: syz_clone(0xa7803300, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x6313, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:09 executing program 1: syz_clone(0xa7803300, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:09 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x248c0, 0x0) 16:48:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x12142) 16:48:09 executing program 1: syz_clone(0xa7803300, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f00000015c0), 0x4) 16:48:09 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:09 executing program 5: syz_clone(0x10201000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)='\t') [ 318.796851][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:48:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)="ab", 0x1}], 0x1}, 0x0) [ 318.909408][ T7] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 319.129525][ T7] usb 3-1: device descriptor read/64, error 18 [ 319.409395][ T7] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 319.599392][ T7] usb 3-1: device descriptor read/64, error 18 [ 319.720337][ T7] usb usb3-port1: attempt power cycle 16:48:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x6313, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000019c0)={&(0x7f00000017c0), 0x6e, 0x0}, 0x0) close(r0) 16:48:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) recvmsg(r0, 0x0, 0x0) [ 320.141818][ T7] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 320.329425][ T7] usb 3-1: device descriptor read/8, error -61 [ 320.599419][ T7] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 320.779449][ T7] usb 3-1: device descriptor read/8, error -61 [ 320.899806][ T7] usb usb3-port1: unable to enumerate USB device 16:48:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) close(r0) 16:48:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3, 0xfffffffc}]}]}}, &(0x7f00000001c0)=""/197, 0x32, 0xc5, 0x2}, 0x20) 16:48:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x6313, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:12 executing program 1: socketpair(0x10, 0x0, 0x701, &(0x7f0000000040)) 16:48:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) 16:48:12 executing program 1: bpf$OBJ_GET_MAP(0x11, &(0x7f0000000000)={&(0x7f0000001780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10) 16:48:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f00000015c0), 0x4) 16:48:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f00000015c0), 0x4) 16:48:12 executing program 1: syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) [ 321.849230][ T3883] udevd[3883]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 322.159388][ T3692] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 322.359460][ T3692] usb 3-1: device descriptor read/64, error 18 [ 322.629406][ T3692] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 322.820427][ T3692] usb 3-1: device descriptor read/64, error 18 [ 322.940730][ T3692] usb usb3-port1: attempt power cycle [ 323.349385][ T3692] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 323.519511][ T3692] usb 3-1: device descriptor read/8, error -61 [ 323.789392][ T3692] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 323.959494][ T3692] usb 3-1: device descriptor read/8, error -61 [ 324.079542][ T3692] usb usb3-port1: unable to enumerate USB device 16:48:15 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f00000015c0), 0x4) 16:48:15 executing program 1: syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 16:48:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x6313, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f00000015c0), 0x4) 16:48:15 executing program 1: syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 16:48:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)="ab", 0x1}], 0x1}, 0x0) 16:48:15 executing program 1: syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 16:48:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0xf0ff7f00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 16:48:16 executing program 5: syz_clone(0x11080000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 325.159398][ T3696] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 325.349681][ T3696] usb 3-1: device descriptor read/64, error 18 [ 325.629354][ T3696] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 325.829367][ T3696] usb 3-1: device descriptor read/64, error 18 [ 325.949933][ T3696] usb usb3-port1: attempt power cycle [ 326.359390][ T3696] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 326.529499][ T3696] usb 3-1: device descriptor read/8, error -61 [ 326.799429][ T3696] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 326.970242][ T3696] usb 3-1: device descriptor read/8, error -61 [ 327.091502][ T3696] usb usb3-port1: unable to enumerate USB device 16:48:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:18 executing program 5: syz_clone(0x808400, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f0000000100)=""/140, 0x2a, 0x8c, 0x1}, 0x20) 16:48:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x6313, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:18 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed={{}, [], {0x95, 0x2}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:18 executing program 5: syz_clone(0x30180000, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union={0x6, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000580)=""/4096, 0x2c, 0x1000, 0x1}, 0x20) 16:48:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000015c0), 0x4) 16:48:18 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) 16:48:18 executing program 5: syz_clone(0x40100080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 328.259634][ T5093] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 328.459448][ T5093] usb 3-1: device descriptor read/64, error 18 [ 328.729427][ T5093] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 328.920437][ T5093] usb 3-1: device descriptor read/64, error 18 [ 329.051315][ T5093] usb usb3-port1: attempt power cycle [ 329.459424][ T5093] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 329.629565][ T5093] usb 3-1: device descriptor read/8, error -61 [ 329.919443][ T5093] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 330.112030][ T5093] usb 3-1: device descriptor read/8, error -61 [ 330.230173][ T5093] usb usb3-port1: unable to enumerate USB device 16:48:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xd, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:21 executing program 5: syz_clone(0x40100080, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:21 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x48, 0x0, 0x6}]}}, &(0x7f0000000580)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 331.148786][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:48:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x48, 0x0, 0x6}]}}, &(0x7f0000000580)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 16:48:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x48, 0x0, 0x6}]}}, &(0x7f0000000580)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 16:48:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x48, 0x0, 0x6}]}}, &(0x7f0000000580)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 16:48:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}]}}, &(0x7f00000001c0)=""/197, 0x32, 0xc5, 0x2}, 0x20) 16:48:22 executing program 5: syz_clone(0x40100080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 331.429414][ T5093] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 331.659529][ T5093] usb 3-1: device descriptor read/64, error 18 [ 331.949454][ T5093] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 332.149383][ T5093] usb 3-1: device descriptor read/64, error 18 [ 332.270712][ T5093] usb usb3-port1: attempt power cycle [ 332.679349][ T5093] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 332.850574][ T5093] usb 3-1: device descriptor read/8, error -61 [ 333.119401][ T5093] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 333.299516][ T5093] usb 3-1: device descriptor read/8, error -61 [ 333.419631][ T5093] usb usb3-port1: unable to enumerate USB device 16:48:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:24 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000070000000000000000000003000000000500000005000000c20000000600000000000007"], &(0x7f0000000240)=""/169, 0x9b, 0xa9, 0x1}, 0x20) 16:48:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:24 executing program 5: syz_clone(0x40100080, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:24 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0xf, 0x0, 0x0, [{}]}]}}, &(0x7f0000000580)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 16:48:24 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union={0x6, 0x0, 0x0, 0x8, 0x0, 0x10}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000580)=""/4096, 0x2c, 0x1000, 0x1}, 0x20) [ 333.970609][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:48:25 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:25 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xa03) 16:48:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:48:25 executing program 1: syz_clone(0x120c1000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 334.409541][ T3661] Bluetooth: hci1: command 0x0406 tx timeout [ 334.411575][ T3660] Bluetooth: hci5: command 0x0406 tx timeout [ 334.416487][ T3661] Bluetooth: hci0: command 0x0406 tx timeout [ 334.422488][ T3657] Bluetooth: hci4: command 0x0406 tx timeout [ 334.428361][ T3661] Bluetooth: hci2: command 0x0406 tx timeout [ 334.433718][ T3651] Bluetooth: hci3: command 0x0406 tx timeout [ 334.579521][ T5093] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 334.821302][ T5093] usb 3-1: device descriptor read/64, error 18 [ 335.099442][ T5093] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 335.289380][ T5093] usb 3-1: device descriptor read/64, error 18 [ 335.419971][ T5093] usb usb3-port1: attempt power cycle [ 335.829370][ T5093] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 336.020533][ T5093] usb 3-1: device descriptor read/8, error -61 [ 336.289401][ T5093] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 336.459487][ T5093] usb 3-1: device descriptor read/8, error -61 [ 336.579485][ T5093] usb usb3-port1: unable to enumerate USB device 16:48:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 16:48:27 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x71}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:27 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x3406, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:27 executing program 1: syz_clone(0x10201000, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 16:48:28 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x3406, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 337.129522][ T27] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 337.162877][ T3883] udevd[3883]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:48:28 executing program 1: syz_clone(0x10201000, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 16:48:28 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x3406, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:28 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x3406, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 337.429460][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 337.469784][ T27] usb 3-1: no configurations [ 337.475188][ T27] usb 3-1: can't read configurations, error -22 [ 337.629477][ T27] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 337.879369][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 337.919676][ T27] usb 3-1: no configurations [ 337.924347][ T27] usb 3-1: can't read configurations, error -22 [ 337.931857][ T27] usb usb3-port1: attempt power cycle [ 338.339387][ T27] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 338.429941][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 338.469523][ T27] usb 3-1: no configurations [ 338.474127][ T27] usb 3-1: can't read configurations, error -22 [ 338.629367][ T27] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 338.719582][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 338.759534][ T27] usb 3-1: no configurations [ 338.764160][ T27] usb 3-1: can't read configurations, error -22 [ 338.771679][ T27] usb usb3-port1: unable to enumerate USB device 16:48:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:30 executing program 1: syz_clone(0x10201000, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 16:48:30 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 16:48:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 16:48:30 executing program 1: syz_clone(0x10201000, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 16:48:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) [ 340.042064][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:48:31 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0), 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 16:48:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) [ 340.429423][ T5093] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 340.709614][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 340.749491][ T5093] usb 3-1: no configurations [ 340.754114][ T5093] usb 3-1: can't read configurations, error -22 [ 340.909428][ T5093] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 341.171828][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 341.209681][ T5093] usb 3-1: no configurations [ 341.214398][ T5093] usb 3-1: can't read configurations, error -22 [ 341.220832][ T5093] usb usb3-port1: attempt power cycle [ 341.629371][ T5093] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 341.721774][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 341.759500][ T5093] usb 3-1: no configurations [ 341.764189][ T5093] usb 3-1: can't read configurations, error -22 [ 341.919384][ T5093] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 342.009663][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 342.051715][ T5093] usb 3-1: no configurations [ 342.056386][ T5093] usb 3-1: can't read configurations, error -22 [ 342.062902][ T5093] usb usb3-port1: unable to enumerate USB device 16:48:33 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x6, &(0x7f00000015c0), 0x4) 16:48:33 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{}], "96a5c1"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f00000003c0)=""/178, 0x45, 0xb2, 0x1}, 0x20) 16:48:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 16:48:33 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000070000000000000000000003000000000500000005000000c200000006000000000000070004"], &(0x7f0000000240)=""/169, 0x9b, 0xa9, 0x1}, 0x20) 16:48:33 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x9, &(0x7f0000001400)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) 16:48:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x1000000) [ 343.239007][ T3882] udevd[3882]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:48:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) [ 343.479338][ T27] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 343.719410][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 343.759470][ T27] usb 3-1: no configurations [ 343.764095][ T27] usb 3-1: can't read configurations, error -22 [ 343.919388][ T27] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 344.159422][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 344.199538][ T27] usb 3-1: no configurations [ 344.204160][ T27] usb 3-1: can't read configurations, error -22 [ 344.211208][ T27] usb usb3-port1: attempt power cycle [ 344.619363][ T27] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 344.709576][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 344.749608][ T27] usb 3-1: no configurations [ 344.754235][ T27] usb 3-1: can't read configurations, error -22 [ 344.919730][ T27] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 345.009480][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 345.049545][ T27] usb 3-1: no configurations [ 345.054149][ T27] usb 3-1: can't read configurations, error -22 [ 345.060726][ T27] usb usb3-port1: unable to enumerate USB device 16:48:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) 16:48:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:36 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000002e00)={&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10) 16:48:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:36 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) 16:48:36 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x19, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f00000015c0), 0x4) 16:48:37 executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) [ 346.259512][ T27] usb 3-1: new high-speed USB device number 57 using dummy_hcd 16:48:37 executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) [ 346.350443][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:48:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) [ 346.529334][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 346.661327][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.681655][ T27] usb 3-1: config 0 has no interfaces? [ 346.687441][ T27] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 346.697502][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.707209][ T27] usb 3-1: config 0 descriptor?? 16:48:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:39 executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) 16:48:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:39 executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) [ 348.827398][ T5093] usb 3-1: USB disconnect, device number 57 16:48:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) 16:48:39 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x12, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:48:39 executing program 5: syz_clone(0x9a767693c6768509, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x18}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2002) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)="ab431d0ace5ff1998d8d39c9803c3570ab5fedabae19630137", 0x19}], 0x1}, 0x0) 16:48:40 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x3}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 349.261456][ T5093] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 349.509343][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 349.629524][ T5093] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.648113][ T5093] usb 3-1: config 0 has no interfaces? [ 349.665507][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 349.685811][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.706879][ T5093] usb 3-1: config 0 descriptor?? 16:48:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x48000000}]}}, &(0x7f0000000140)=""/143, 0x26, 0x8f, 0x1}, 0x20) 16:48:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:40 executing program 5: syz_clone(0x9a767693c6768509, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:42 executing program 5: syz_clone(0x9a767693c6768509, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:42 executing program 1: syz_clone(0x50006000, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 351.861166][ T3696] usb 3-1: USB disconnect, device number 58 16:48:43 executing program 5: syz_clone(0x9a767693c6768509, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:43 executing program 1: syz_clone(0x50006000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 352.289350][ T3696] usb 3-1: new high-speed USB device number 59 using dummy_hcd 16:48:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:43 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) 16:48:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x20) 16:48:43 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x9, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 352.541589][ T3696] usb 3-1: Using ep0 maxpacket: 8 16:48:43 executing program 1: syz_clone(0x50006000, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:43 executing program 5: syz_clone(0x302000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 352.659973][ T3696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.688154][ T3696] usb 3-1: config 0 has no interfaces? [ 352.708125][ T3696] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 352.747902][ T3696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.773702][ T3696] usb 3-1: config 0 descriptor?? 16:48:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f00000015c0), 0x4) 16:48:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:45 executing program 1: syz_clone(0x50006000, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x1a, &(0x7f00000015c0), 0x4) 16:48:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xb, 0x0, 0x0, 0x4004}, 0x48) [ 354.904939][ T5093] usb 3-1: USB disconnect, device number 59 16:48:45 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/cgroup\x00') 16:48:46 executing program 5: syz_clone(0x30180000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 16:48:46 executing program 5: syz_clone(0x30180000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 16:48:46 executing program 5: syz_clone(0x30180000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 16:48:46 executing program 5: syz_clone(0x30180000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) [ 355.369424][ T5093] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 355.639349][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 355.789397][ T5093] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.808268][ T5093] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.835100][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 355.852912][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.877426][ T5093] usb 3-1: config 0 descriptor?? 16:48:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:48 executing program 5: syz_clone(0x10201000, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:48 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:49 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x6200}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 357.948056][ T3693] usb 3-1: USB disconnect, device number 60 16:48:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) 16:48:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) 16:48:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) 16:48:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) [ 358.379337][ T3693] usb 3-1: new high-speed USB device number 61 using dummy_hcd 16:48:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) [ 358.629382][ T3693] usb 3-1: Using ep0 maxpacket: 8 [ 358.749479][ T3693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.768779][ T3693] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 358.796431][ T3693] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 358.831216][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.845486][ T3693] usb 3-1: config 0 descriptor?? 16:48:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) [ 360.980843][ T5093] usb 3-1: USB disconnect, device number 61 [ 361.429343][ T5093] usb 3-1: new high-speed USB device number 62 using dummy_hcd 16:48:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) [ 361.709343][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 361.839483][ T5093] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.855568][ T5093] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.875577][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 361.894860][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.918508][ T5093] usb 3-1: config 0 descriptor?? 16:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, 0x0) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) [ 363.996904][ T3716] usb 3-1: USB disconnect, device number 62 [ 364.479483][ T3716] usb 3-1: new high-speed USB device number 63 using dummy_hcd 16:48:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) [ 364.779328][ T3716] usb 3-1: Using ep0 maxpacket: 8 16:48:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, 0x0) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) [ 364.909520][ T3716] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.918536][ T3716] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 364.928042][ T3716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:48:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) [ 364.955150][ T3716] usb 3-1: config 0 descriptor?? 16:48:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, 0x0) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:48:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x0, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) [ 367.044526][ T5093] usb 3-1: USB disconnect, device number 63 16:48:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x0, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:48:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) [ 367.789429][ T5093] usb 3-1: new high-speed USB device number 64 using dummy_hcd 16:48:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x0, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:48:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:48:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) [ 368.070998][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 368.209511][ T5093] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.218573][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 368.227796][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.237192][ T5093] usb 3-1: config 0 descriptor?? 16:49:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) [ 370.077499][ T23] usb 3-1: USB disconnect, device number 64 16:49:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) [ 370.969343][ T23] usb 3-1: new high-speed USB device number 65 using dummy_hcd 16:49:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) [ 372.179326][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 372.439496][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.451291][ T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 372.461154][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.482472][ T23] usb 3-1: config 0 descriptor?? 16:49:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(0x0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:05 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(0x0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) [ 374.088305][ T3692] usb 3-1: USB disconnect, device number 65 16:49:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 16:49:05 executing program 1: mq_open(&(0x7f0000000280)='.log\x00', 0x0, 0x100, 0x0) 16:49:05 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 16:49:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x80) 16:49:05 executing program 1: mq_open(&(0x7f00000007c0)='\x02', 0x40, 0x30, 0x0) 16:49:05 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) 16:49:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000a40), 0x4) 16:49:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) [ 375.089343][ T3692] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 375.349338][ T3692] usb 3-1: Using ep0 maxpacket: 8 [ 375.469475][ T3692] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 375.478530][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.487609][ T3692] usb 3-1: config 0 descriptor?? [ 375.749481][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 375.759580][ T3692] asix: probe of 3-1:0.0 failed with error -61 16:49:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x53) 16:49:08 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 16:49:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(0x0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:08 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}) 16:49:08 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x40, 0xa8, &(0x7f00000000c0)) [ 377.115151][ T3692] usb 3-1: USB disconnect, device number 66 16:49:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_pressure(r0, 0x0, 0x0) 16:49:08 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x140, 0x98) 16:49:08 executing program 5: msgget$private(0x0, 0xa0) 16:49:08 executing program 1: mq_open(&(0x7f0000000040)='.log\x00', 0x40, 0x8f, &(0x7f0000000080)) [ 378.129363][ T3692] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 378.379403][ T3692] usb 3-1: Using ep0 maxpacket: 8 [ 378.410217][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.416497][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.509479][ T3692] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 378.518522][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.527607][ T3692] usb 3-1: config 0 descriptor?? [ 378.800965][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 378.811013][ T3692] asix: probe of 3-1:0.0 failed with error -61 16:49:11 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:11 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x800, 0x72, 0x0) 16:49:11 executing program 1: mq_open(&(0x7f00000007c0)='.log\x00', 0x40, 0x154, &(0x7f0000000800)) 16:49:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x0, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RATTACH(r0, &(0x7f0000000000)={0x14}, 0x14) [ 380.150786][ T3692] usb 3-1: USB disconnect, device number 67 16:49:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000100)=""/189, &(0x7f0000000080)=0xbd) 16:49:11 executing program 1: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, 0x0, 0x51) 16:49:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000100)=""/189, &(0x7f0000000080)=0xbd) 16:49:11 executing program 1: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, 0x0, 0x51) 16:49:11 executing program 1: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, 0x0, 0x51) [ 381.039427][ T3692] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 381.279431][ T3692] usb 3-1: Using ep0 maxpacket: 8 [ 381.399505][ T3692] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 381.408602][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.421302][ T3692] usb 3-1: config 0 descriptor?? [ 381.680582][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 381.690760][ T3692] asix: probe of 3-1:0.0 failed with error -61 16:49:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:14 executing program 1: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, 0x0, 0x51) 16:49:14 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000100)=""/189, &(0x7f0000000080)=0xbd) 16:49:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x0, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:14 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000100)=""/189, &(0x7f0000000080)=0xbd) 16:49:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 383.207247][ T23] usb 3-1: USB disconnect, device number 68 16:49:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004000), 0x0, 0x40) 16:49:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 16:49:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 16:49:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 384.119457][ T23] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 384.359352][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 384.479471][ T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 384.488561][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.497995][ T23] usb 3-1: config 0 descriptor?? [ 384.759425][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 384.769588][ T23] asix: probe of 3-1:0.0 failed with error -32 16:49:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 16:49:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 16:49:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x0, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:17 executing program 1: mq_open(&(0x7f00000007c0)='.log\x00', 0x0, 0x154, &(0x7f0000000800)) 16:49:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 386.256137][ T23] usb 3-1: USB disconnect, device number 69 16:49:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x7fdcca11316243a2) 16:49:17 executing program 1: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) 16:49:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe07) 16:49:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x10, &(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x80) [ 387.139465][ T23] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 387.389340][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 387.509444][ T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 387.518553][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.527795][ T23] usb 3-1: config 0 descriptor?? [ 387.789433][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 387.799448][ T23] asix: probe of 3-1:0.0 failed with error -32 16:49:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:49:20 executing program 1: rt_sigaction(0x30, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000002c0)) 16:49:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:20 executing program 5: setreuid(0xee01, 0xee01) 16:49:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x4040000, &(0x7f0000000100)=@in={0x2, 0x4e20, @local}, 0x80) [ 389.299330][ T23] usb 3-1: USB disconnect, device number 70 16:49:20 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x0, 0x0) 16:49:20 executing program 1: r0 = getgid() setregid(0xee00, r0) [ 389.739581][ T23] usb 3-1: new high-speed USB device number 71 using dummy_hcd 16:49:20 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x0, 0x0) 16:49:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RREAD(r0, &(0x7f0000000040)={0xb}, 0xb) [ 389.843668][ T3882] udevd[3882]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 390.019398][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 390.139545][ T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 390.148712][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.181053][ T23] usb 3-1: config 0 descriptor?? [ 390.439397][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 390.449469][ T23] asix: probe of 3-1:0.0 failed with error -32 16:49:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:23 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x0, 0x0) 16:49:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RLINK(r0, 0x0, 0x0) 16:49:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:23 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x107042, 0x0) write$cgroup_type(r0, 0x0, 0xfe34) 16:49:23 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x0, 0x0) [ 392.349631][ T5093] usb 3-1: USB disconnect, device number 71 [ 392.642487][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:49:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x80) 16:49:23 executing program 5: msgget$private(0x0, 0x20) 16:49:23 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 16:49:23 executing program 1: r0 = msgget(0x2, 0x0) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001640)=""/100) [ 393.199410][ T5093] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 393.449419][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 393.569533][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 393.578684][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.587836][ T5093] usb 3-1: config 0 descriptor?? [ 393.849860][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 393.859930][ T5093] asix: probe of 3-1:0.0 failed with error -32 16:49:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000005280)) 16:49:26 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$getownex(r0, 0x10, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0}) r3 = mq_open(&(0x7f0000000340)='.pending_reads\x00', 0x1040, 0x1, &(0x7f0000000380)={0x1000, 0x1, 0x81}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000003c0)={r2, r1, "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", "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"}) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000240)='.pending_reads\x00', 0x0, 0xc0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}, 0xffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, 0x0) linkat(r4, &(0x7f0000000280)='./file0\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x400) 16:49:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:26 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x40, 0x6e, &(0x7f00000002c0)) 16:49:26 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x418402, 0x0) [ 395.368353][ T23] usb 3-1: USB disconnect, device number 72 16:49:26 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0x0) [ 395.809385][ T23] usb 3-1: new high-speed USB device number 73 using dummy_hcd 16:49:26 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x40, 0x6e, &(0x7f00000002c0)) 16:49:26 executing program 1: syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 16:49:26 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x40, 0x6e, &(0x7f00000002c0)) [ 396.119390][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 396.242750][ T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 396.251967][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.261375][ T23] usb 3-1: config 0 descriptor?? [ 396.519482][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 396.529628][ T23] asix: probe of 3-1:0.0 failed with error -32 16:49:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:29 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) r1 = fcntl$getown(r0, 0x9) getpgrp(r1) 16:49:29 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x40, 0x6e, &(0x7f00000002c0)) 16:49:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x0, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:29 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) r1 = fcntl$getown(r0, 0x9) syz_open_procfs$userns(r1, &(0x7f0000003400)) 16:49:29 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) [ 398.403159][ T5093] usb 3-1: USB disconnect, device number 73 16:49:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x0, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:29 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x40, 0xa8, 0x0) 16:49:29 executing program 1: syz_io_uring_setup(0x784, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) [ 398.480590][ T6645] mmap: syz-executor.4 (6645): VmData 37515264 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 16:49:29 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x40, 0xa8, 0x0) [ 398.859342][ T5093] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 399.109344][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 399.272211][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 399.281305][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.291289][ T5093] usb 3-1: config 0 descriptor?? [ 399.549430][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 399.559455][ T5093] asix: probe of 3-1:0.0 failed with error -32 16:49:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x0, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:32 executing program 1: mq_open(&(0x7f0000000000)='.log\x00', 0x0, 0x1, 0x0) 16:49:32 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x40, 0xa8, 0x0) 16:49:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:32 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) 16:49:32 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x40, 0xa8, 0x0) [ 401.449072][ T7] usb 3-1: USB disconnect, device number 74 16:49:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:32 executing program 1: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, 0x0, 0xffffffffffffff85) 16:49:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc) 16:49:32 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 16:49:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)=""/234, &(0x7f0000000200)=0xea) [ 401.859695][ T7] usb 3-1: new high-speed USB device number 75 using dummy_hcd 16:49:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)=""/234, &(0x7f0000000200)=0xea) 16:49:33 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) [ 402.149434][ T7] usb 3-1: Using ep0 maxpacket: 8 16:49:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) [ 402.289753][ T7] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 402.298860][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.313060][ T7] usb 3-1: config 0 descriptor?? [ 402.779456][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 402.789448][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 402.799753][ T7] asix: probe of 3-1:0.0 failed with error -61 16:49:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)=""/234, &(0x7f0000000200)=0xea) 16:49:35 executing program 1: r0 = socket(0x11, 0x2, 0x0) connect$netlink(r0, 0x0, 0x0) 16:49:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)=""/234, &(0x7f0000000200)=0xea) [ 404.487627][ T7] usb 3-1: USB disconnect, device number 75 16:49:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x3d) 16:49:35 executing program 1: msgget$private(0x0, 0x10) 16:49:35 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x0, 0x180, &(0x7f0000000040)) 16:49:36 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x0, 0xa8, &(0x7f00000000c0)) 16:49:36 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 16:49:36 executing program 1: r0 = mq_open(&(0x7f0000000280)='.log\x00', 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) 16:49:36 executing program 5: r0 = socket(0x11, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 16:49:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) [ 405.379378][ T7] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 405.619348][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 405.739550][ T7] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 405.748633][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.757789][ T7] usb 3-1: config 0 descriptor?? [ 406.219459][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 406.229570][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 406.239970][ T7] asix: probe of 3-1:0.0 failed with error -61 16:49:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000003, 0x75cdb45fab224a35, r0, 0x10000000) 16:49:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) 16:49:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:38 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x0, 0xa8, 0x0) 16:49:38 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) [ 407.528504][ T5093] usb 3-1: USB disconnect, device number 76 16:49:39 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x0, 0x100, &(0x7f00000002c0)) 16:49:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x8014) 16:49:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@initdev, @local}, &(0x7f0000000140)=0xc) 16:49:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f000000ec80)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}}], 0x1, 0x0) [ 408.419705][ T5093] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 408.659360][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 408.779541][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 408.788588][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.797660][ T5093] usb 3-1: config 0 descriptor?? [ 409.279534][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 409.289624][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 409.299897][ T5093] asix: probe of 3-1:0.0 failed with error -61 16:49:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:41 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) write$cgroup_type(r0, 0x0, 0xffffffffffffff0b) 16:49:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') write$P9_RSTAT(r0, 0x0, 0x0) 16:49:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000100)=""/48) 16:49:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RGETLOCK(r0, 0x0, 0x0) [ 410.594001][ T5093] usb 3-1: USB disconnect, device number 77 16:49:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80) 16:49:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RXATTRCREATE(r0, 0x0, 0x0) 16:49:41 executing program 1: mq_open(&(0x7f0000000200)='.log\x00\b.\x99\xbf^\xab\xa8\\Zw\r\xc8\x93\xf7\t\xeb\xdc\x1e\xb0\x96\xd9$Q\xf2P\xc7\xf0\x1c\xf1r\x18\xf6.5\xaa\xd0g\x81\x03h\xdc\xc9]\'\xb4\xd4\xa6\x9f\xc8C\xa7$\x93\xe1p\x80^\x9e\xd3\xe4\xe0\"\xf4\xf9d\xe4\x84b\xe9\xd1c\x95\xae\x82\xa4\xb1\xebu\x12Y\x0f\xd2Yv\xa7\x05D\n\xd4[\xc4\xf0\x92\xe7)lGH\x9a\xff\x8c`\xc5\x18\xab\x00I\xbf\xa36\x9d\x02\x11\\\x01\xf7\xd0\xa3\xeaP\xac\xf0r\xcd6\xc4\x1b\xd9\xad\xf9qDKA57\x93H\xd2\x9d7\x1a\xdc\x14q\xb2\xdb\x1fr\x96\x9c\x14\xabY\xdd\xa0\x00\xb5`|x\x1c\xde2\xf2\xdf\xcdI\b\xfck\x92+\x17\xaa\xf5\x10\x1f\xe7\xcd\xa2\xa3:*\x89c\x16\xd9\xc5\xa9\xc5\x901\xd1\xd4\x1c\x93\xdcq<\xa6oi\xf35\xb7\xe8<\x12\x95\xa77v\x90\xd9T\xa7\x02\x84\x96\xd0\xb6\xcd\xed\xf4\xec\xcd\xfa+\x8b`\x88;\x9e\x801!\xd1+\xc6\xdd\xa2\xcc\x96\xa5!\x97\xa7nW\xab1k\xbcf+\xed\a\xe6W\xf5\xd2\xf2\xd6uv\xb3\x94_\xd1\x9d\x99p\xb0', 0x40, 0x180, &(0x7f0000000000)) 16:49:41 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x0, 0x6e, &(0x7f00000002c0)) [ 411.049363][ T5093] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 411.316340][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 411.474863][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 411.483966][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.494511][ T5093] usb 3-1: config 0 descriptor?? [ 411.989581][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 411.999567][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 412.010704][ T5093] asix: probe of 3-1:0.0 failed with error -61 16:49:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_pressure(r0, &(0x7f0000000300)={'some'}, 0x2f) 16:49:44 executing program 1: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7}, 0xffffffbc) 16:49:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004000)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x40) [ 413.647366][ T5093] usb 3-1: USB disconnect, device number 78 16:49:44 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RXATTRWALK(r0, 0x0, 0x0) 16:49:44 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo\x00') openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) 16:49:44 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) 16:49:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r1) 16:49:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000005040)={'lo\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) [ 414.109374][ T5093] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 414.389852][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 414.516671][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 414.543687][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.553401][ T5093] usb 3-1: config 0 descriptor?? [ 415.029453][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 415.039530][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 415.049881][ T5093] asix: probe of 3-1:0.0 failed with error -61 16:49:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:47 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa80c, 0x1) 16:49:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000016c0), 0x0, 0x80) 16:49:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x401}, 0x80) 16:49:47 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) [ 416.683179][ T23] usb 3-1: USB disconnect, device number 79 16:49:47 executing program 1: getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setregid(0xee00, r0) 16:49:47 executing program 5: mq_open(&(0x7f00000007c0)='.log\x00', 0x80, 0x0, 0x0) 16:49:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x2c, 0x37, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe, 'oom_score_adj\x00'}}, 0x2c) 16:49:47 executing program 5: utimensat(0xffffffffffffffff, 0x0, 0x0, 0xdd0dc17930646cc2) [ 416.994802][ T3883] udevd[3883]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 417.329334][ T23] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 417.569395][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 417.689938][ T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 417.699011][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.709126][ T23] usb 3-1: config 0 descriptor?? [ 418.189476][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 418.199511][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 418.209835][ T23] asix: probe of 3-1:0.0 failed with error -61 16:49:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:50 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo\x00') mq_open(&(0x7f0000000100)='fdinfo\x00', 0x40, 0x44, &(0x7f0000000080)={0x41, 0x4009, 0x7, 0x8}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"de8b4c3f589317c10b4a6219c2d65d86", 0x0, 0x0, {0x20, 0x7f}, {0x868, 0x2}, 0x0, [0x3, 0x4, 0xede, 0x6, 0x1610000000000000, 0x8, 0x7fc, 0x7fff, 0x16, 0x9c25, 0x0, 0x6e1, 0x6, 0x8, 0x81, 0xffffffffffffa5b9]}) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') 16:49:50 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 16:49:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x40) 16:49:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000100)=@in={0x2, 0x4e20, @local}, 0xb7) [ 419.735978][ T5093] usb 3-1: USB disconnect, device number 80 16:49:50 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) 16:49:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo\x00') mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:49:50 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x0, 0x180, 0x0) 16:49:51 executing program 1: rt_sigaction(0x2d, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) [ 420.209343][ T5093] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 420.479314][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 420.619505][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 420.628587][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.640139][ T5093] usb 3-1: config 0 descriptor?? [ 421.099440][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 421.109387][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 421.120169][ T5093] asix: probe of 3-1:0.0 failed with error -32 16:49:53 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:53 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x84d01, 0x0) write$cgroup_type(r0, 0x0, 0x0) 16:49:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RLERROR(r0, 0x0, 0x78) 16:49:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:53 executing program 5: mq_open(&(0x7f00000007c0)='.log\x00', 0x40, 0x0, 0x0) [ 422.778681][ T3698] usb 3-1: USB disconnect, device number 81 16:49:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) 16:49:54 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x8, 0x0) 16:49:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) 16:49:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:54 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x8, 0x0) [ 423.629367][ T3698] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 423.870349][ T3698] usb 3-1: Using ep0 maxpacket: 8 [ 423.989455][ T3698] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 423.998575][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.007911][ T3698] usb 3-1: config 0 descriptor?? [ 424.489563][ T3698] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 424.499663][ T3698] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 424.509966][ T3698] asix: probe of 3-1:0.0 failed with error -32 16:49:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) 16:49:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:56 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x8, 0x0) 16:49:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:56 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x8, 0x0) 16:49:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) [ 425.836336][ T3692] usb 3-1: USB disconnect, device number 82 16:49:57 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x2000) 16:49:57 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RLERRORu(r0, 0x0, 0xe) [ 426.449457][ T3692] usb 3-1: new high-speed USB device number 83 using dummy_hcd 16:49:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x107042, 0x0) write$cgroup_type(r0, 0x0, 0x0) 16:49:57 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x80, 0x1, &(0x7f0000000040)) [ 426.749471][ T3692] usb 3-1: Using ep0 maxpacket: 8 [ 426.879521][ T3692] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 426.888638][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.897742][ T3692] usb 3-1: config 0 descriptor?? [ 427.379389][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 427.389427][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 427.400176][ T3692] asix: probe of 3-1:0.0 failed with error -32 16:49:59 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:49:59 executing program 5: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, 0x0) 16:49:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:49:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:49:59 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000380)) 16:49:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:49:59 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) [ 428.856483][ T3692] usb 3-1: USB disconnect, device number 83 16:49:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RCREATE(r0, &(0x7f0000000000)={0x18}, 0x18) 16:50:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, 0x0}}], 0x1, 0x0) 16:50:00 executing program 1: mq_open(&(0x7f0000000000)='.log\x00\xebe\xa9\x98\xa4e\xa03`$\x14`\xeb\xb3$\x1e\x85\xee$\x82Pk\xc3\xfa\x877\x90hz\xd5\x80\xf3\x05o\'Q\x87\xdb4b\xc2\xaaq\x13\x98=\xed\rUE\x92Y\x8b\xa06B\x0f\xcc\xed\xc3\x9a7\xbf\x87\xdb\xaf4\xda\xa0}\x01\x81r\x9a\xd4\xfa9g\v\xf3\xc0\xf8\xe8\xee\xca}f|p\xf1\xe6\x00\xb7\xd0\x90e,\xec\x7f\xaa]\x00\x104\xa2\x84\xa8\xab\xa0\x8d\xf4\x19|\x0fR\xb3\xd5L\x83\xb1+\x93)\xae\x9d\x05\x14A]9\xee\xe1\xcf\xc1\xb3\x05\xf17\x89\xa2\xb2.\xafA\xb0J\xef\x9ao~\x10*\xfe\x9c\xffeL\xb1;eh\xf8\x03\x1f[\xc6\xd2\xbc\xf3A\xa7\x7f\x91\xc9\xaa', 0x40, 0x2, 0x0) [ 429.259437][ T3692] usb 3-1: new high-speed USB device number 84 using dummy_hcd 16:50:00 executing program 5: mq_open(&(0x7f0000000040)='XZ\xbb%\x8fJ\xab\xeczsbn\x18K', 0x40, 0x8, 0x0) 16:50:00 executing program 5: mq_open(&(0x7f0000000000)='.log\x00', 0x80, 0x180, 0x0) [ 429.559320][ T3692] usb 3-1: Using ep0 maxpacket: 8 [ 429.679771][ T3692] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 429.688912][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.699748][ T3692] usb 3-1: config 0 descriptor?? [ 430.179400][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 430.190392][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 430.200734][ T3692] asix: probe of 3-1:0.0 failed with error -32 16:50:02 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x0) 16:50:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000003200), 0x0, 0x0) 16:50:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:50:02 executing program 5: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAME(r0, 0x0, 0xffffffffffffff99) 16:50:02 executing program 1: mq_open(&(0x7f00000007c0)='.log\x00', 0x0, 0x154, 0x0) 16:50:03 executing program 5: uname(&(0x7f0000000040)=""/27) [ 431.936546][ T3692] usb 3-1: USB disconnect, device number 84 [ 432.319816][ T3692] usb 3-1: new high-speed USB device number 85 using dummy_hcd 16:50:03 executing program 5: uname(&(0x7f0000000040)=""/27) 16:50:03 executing program 1: mq_open(&(0x7f00000007c0)='.log\x00', 0x0, 0x154, 0x0) 16:50:03 executing program 5: uname(&(0x7f0000000040)=""/27) [ 432.639395][ T3692] usb 3-1: Using ep0 maxpacket: 8 [ 432.769542][ T3692] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 432.779427][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.793742][ T3692] usb 3-1: config 0 descriptor?? [ 433.269409][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 433.279369][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 433.289791][ T3692] asix: probe of 3-1:0.0 failed with error -32 16:50:05 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:05 executing program 5: uname(&(0x7f0000000040)=""/27) 16:50:05 executing program 1: mq_open(&(0x7f00000007c0)='.log\x00', 0x0, 0x154, 0x0) 16:50:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:50:06 executing program 1: mq_open(&(0x7f00000007c0)='.log\x00', 0x0, 0x154, 0x0) [ 434.956385][ T5093] usb 3-1: USB disconnect, device number 85 16:50:06 executing program 5: mq_open(&(0x7f00000007c0)='.log\x00', 0x0, 0x0, 0x0) 16:50:06 executing program 1: mq_open(&(0x7f0000000000)='.log\x00', 0x80, 0x180, &(0x7f0000000040)) 16:50:06 executing program 5: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x66, &(0x7f0000000000)) [ 435.429507][ T5093] usb 3-1: new high-speed USB device number 86 using dummy_hcd 16:50:06 executing program 1: mq_open(&(0x7f0000000000)='.log\x00', 0x80, 0x180, &(0x7f0000000040)) 16:50:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x4040004, &(0x7f0000000000)=@in={0x2, 0x4e20, @local}, 0x80) [ 435.710047][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 435.849397][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 435.858471][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.868177][ T5093] usb 3-1: config 0 descriptor?? [ 436.349423][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 436.359356][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 436.370141][ T5093] asix: probe of 3-1:0.0 failed with error -32 16:50:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:09 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RLERRORu(r0, 0x0, 0x8) 16:50:09 executing program 1: mq_open(&(0x7f0000000000)='.log\x00', 0x80, 0x180, &(0x7f0000000040)) 16:50:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:50:09 executing program 1: mq_open(&(0x7f0000000000)='.log\x00', 0x80, 0x180, &(0x7f0000000040)) 16:50:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RMKNOD(r0, 0x0, 0x0) [ 438.011687][ T3698] usb 3-1: USB disconnect, device number 86 16:50:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf}, 0xf) 16:50:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RMKNOD(r0, 0x0, 0x0) 16:50:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf}, 0xf) [ 438.500727][ T3698] usb 3-1: new high-speed USB device number 87 using dummy_hcd 16:50:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RMKNOD(r0, 0x0, 0x0) [ 438.810031][ T3698] usb 3-1: Using ep0 maxpacket: 8 [ 438.929497][ T3698] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 438.938567][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.948045][ T3698] usb 3-1: config 0 descriptor?? [ 439.419399][ T3698] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 439.429442][ T3698] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 439.439803][ T3698] asix: probe of 3-1:0.0 failed with error -32 [ 439.851227][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.857552][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 16:50:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf}, 0xf) 16:50:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RMKNOD(r0, 0x0, 0x0) 16:50:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:50:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) syz_io_uring_setup(0x784, &(0x7f0000000000)={0x0, 0x1eac, 0x1, 0x3, 0x266}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x71e6, &(0x7f0000000100)={0x0, 0x67d8, 0x4, 0x2, 0xcb}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) mq_open(&(0x7f0000000240)='*\x00', 0x40, 0x1, &(0x7f0000000280)={0x0, 0x8, 0x80, 0x7fffffffffffffff}) pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r3, 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000002c0)={0x8, 0x35, 0x1, 0x2}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x20, 0x0, {0x2}}, 0xdb) 16:50:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf}, 0xf) [ 441.067977][ T7] usb 3-1: USB disconnect, device number 87 [ 441.539555][ T7] usb 3-1: new high-speed USB device number 88 using dummy_hcd 16:50:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) syz_io_uring_setup(0x784, &(0x7f0000000000)={0x0, 0x1eac, 0x1, 0x3, 0x266}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x71e6, &(0x7f0000000100)={0x0, 0x67d8, 0x4, 0x2, 0xcb}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) mq_open(&(0x7f0000000240)='*\x00', 0x40, 0x1, &(0x7f0000000280)={0x0, 0x8, 0x80, 0x7fffffffffffffff}) pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r3, 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000002c0)={0x8, 0x35, 0x1, 0x2}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x20, 0x0, {0x2}}, 0xdb) 16:50:12 executing program 1: mq_open(&(0x7f00000007c0)='.log\x00', 0x80, 0x80, 0x0) 16:50:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) syz_io_uring_setup(0x784, &(0x7f0000000000)={0x0, 0x1eac, 0x1, 0x3, 0x266}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x71e6, &(0x7f0000000100)={0x0, 0x67d8, 0x4, 0x2, 0xcb}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) mq_open(&(0x7f0000000240)='*\x00', 0x40, 0x1, &(0x7f0000000280)={0x0, 0x8, 0x80, 0x7fffffffffffffff}) pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r3, 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000002c0)={0x8, 0x35, 0x1, 0x2}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x20, 0x0, {0x2}}, 0xdb) 16:50:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in={0x2, 0x4e20, @local}, 0x80) [ 441.809383][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 441.959640][ T7] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 441.968790][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.977970][ T7] usb 3-1: config 0 descriptor?? [ 442.459573][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 442.469893][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 442.480668][ T7] asix: probe of 3-1:0.0 failed with error -32 16:50:15 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:15 executing program 5: r0 = socket(0x11, 0x2, 0x0) syz_io_uring_setup(0x784, &(0x7f0000000000)={0x0, 0x1eac, 0x1, 0x3, 0x266}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x71e6, &(0x7f0000000100)={0x0, 0x67d8, 0x4, 0x2, 0xcb}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) mq_open(&(0x7f0000000240)='*\x00', 0x40, 0x1, &(0x7f0000000280)={0x0, 0x8, 0x80, 0x7fffffffffffffff}) pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r3, 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000002c0)={0x8, 0x35, 0x1, 0x2}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x20, 0x0, {0x2}}, 0xdb) 16:50:15 executing program 1: mq_open(&(0x7f0000000000)='.log\x00', 0x800, 0x72, &(0x7f0000000040)) 16:50:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:50:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8040) [ 444.103731][ T7] usb 3-1: USB disconnect, device number 88 16:50:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000040), 0xc) 16:50:15 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x75cdb45fab224a35, 0xffffffffffffffff, 0x10000000) 16:50:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 444.549642][ T7] usb 3-1: new high-speed USB device number 89 using dummy_hcd 16:50:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:50:15 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00') write$P9_RSTATFS(r0, 0x0, 0x0) [ 444.839328][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 444.989329][ T7] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 444.998396][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.019296][ T7] usb 3-1: config 0 descriptor?? [ 445.509495][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 445.519452][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 445.529818][ T7] asix: probe of 3-1:0.0 failed with error -32 16:50:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:18 executing program 1: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x0, &(0x7f00000002c0)) 16:50:18 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, 0x0) 16:50:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 16:50:18 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) 16:50:18 executing program 5: mq_open(&(0x7f00000007c0)='.log\x00', 0x800, 0x4a, 0x0) [ 447.145706][ T2937] usb 3-1: USB disconnect, device number 89 16:50:18 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 16:50:18 executing program 5: msgget(0x1, 0x220) [ 447.599486][ T2937] usb 3-1: new high-speed USB device number 90 using dummy_hcd 16:50:18 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 16:50:18 executing program 5: msgget(0x1, 0x220) [ 447.889333][ T2937] usb 3-1: Using ep0 maxpacket: 8 [ 448.015408][ T2937] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 448.029524][ T2937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.038910][ T2937] usb 3-1: config 0 descriptor?? [ 448.739423][ T2937] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 448.749558][ T2937] asix: probe of 3-1:0.0 failed with error -71 [ 448.757751][ T2937] usb 3-1: USB disconnect, device number 90 16:50:20 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 16:50:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xfc00) 16:50:20 executing program 5: msgget(0x1, 0x220) 16:50:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:20 executing program 5: msgget(0x1, 0x220) 16:50:20 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40041, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 16:50:20 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) [ 449.640862][ T3698] usb 3-1: new high-speed USB device number 91 using dummy_hcd 16:50:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xfc00) 16:50:20 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) write$tun(r0, 0xfffffffffffffffe, 0x0) 16:50:20 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 16:50:20 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 16:50:20 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 16:50:20 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) [ 449.959310][ T3698] usb 3-1: Using ep0 maxpacket: 8 16:50:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) [ 450.102311][ T3698] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 450.114011][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.123335][ T3698] usb 3-1: config 0 descriptor?? [ 450.819486][ T3698] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 450.829726][ T3698] asix: probe of 3-1:0.0 failed with error -71 [ 450.837668][ T3698] usb 3-1: USB disconnect, device number 91 16:50:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 16:50:22 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 16:50:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xfc00) 16:50:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:22 executing program 1: mq_open(&(0x7f0000000000)='.log\x00', 0x0, 0x72, &(0x7f0000000040)) 16:50:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@local}}, 0xe8) 16:50:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x34dab534635ccf90) 16:50:22 executing program 1: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x100, 0x0) [ 451.619918][ T3692] usb 3-1: new high-speed USB device number 92 using dummy_hcd 16:50:22 executing program 1: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x100, 0x0) 16:50:22 executing program 0: mknodat$loop(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) [ 451.892905][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 451.909561][ T3692] usb 3-1: Using ep0 maxpacket: 8 [ 452.059401][ T3692] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 452.068540][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.077872][ T3692] usb 3-1: config 0 descriptor?? [ 452.769470][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 452.779580][ T3692] asix: probe of 3-1:0.0 failed with error -71 [ 452.791178][ T3692] usb 3-1: USB disconnect, device number 92 16:50:24 executing program 1: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x100, 0x0) 16:50:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 16:50:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RLERROR(r0, &(0x7f0000000040)={0x17, 0x7, 0x0, {0xe, 'oom_score_adj\x00'}}, 0x17) 16:50:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:24 executing program 1: mq_open(&(0x7f0000000280)='.log\x00', 0x800, 0x100, 0x0) 16:50:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1d, &(0x7f0000000040), 0x4) 16:50:24 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x0) 16:50:24 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast2}, 0x10) 16:50:24 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, 0x0, 0x0) 16:50:24 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20) [ 453.689377][ T23] usb 3-1: new high-speed USB device number 93 using dummy_hcd 16:50:24 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast2}, 0x10) [ 453.812911][ T3883] udevd[3883]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 453.959381][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 454.079515][ T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 454.088619][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.098525][ T23] usb 3-1: config 0 descriptor?? [ 454.799377][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 454.809471][ T23] asix: probe of 3-1:0.0 failed with error -32 16:50:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:27 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, 0x0, 0x0) 16:50:27 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20) 16:50:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_delroute={0x1c, 0x19, 0xd01}, 0x1c}}, 0x0) 16:50:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:27 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000000100)) 16:50:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x49, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:50:27 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x0, 0x0}) [ 456.299755][ T3716] usb 3-1: USB disconnect, device number 93 16:50:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x13, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) 16:50:27 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000000100)) 16:50:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x13, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) [ 456.908349][ T3883] udevd[3883]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 456.920244][ T3716] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 457.173555][ T3716] usb 3-1: Using ep0 maxpacket: 8 [ 457.289882][ T3716] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 457.298989][ T3716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.309429][ T3716] usb 3-1: config 0 descriptor?? [ 458.009548][ T3716] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 458.019670][ T3716] asix: probe of 3-1:0.0 failed with error -32 16:50:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:30 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x0, 0x0}) 16:50:30 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x0, 0x0}) 16:50:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x46, &(0x7f0000000040)={0x80000}, 0x4) 16:50:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000003c0)) sendmmsg$unix(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30}}], 0x2, 0x0) [ 459.337180][ T2937] usb 3-1: USB disconnect, device number 94 16:50:30 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x4, 0x4) 16:50:30 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x4, 0x4) 16:50:30 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 16:50:30 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) [ 459.739590][ T2937] usb 3-1: new high-speed USB device number 95 using dummy_hcd 16:50:30 executing program 0: socket$inet(0x2, 0xa, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, 0x0, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x8004}, 0x400c0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) [ 460.049323][ T2937] usb 3-1: Using ep0 maxpacket: 8 [ 460.171365][ T2937] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 460.180732][ T2937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.191182][ T2937] usb 3-1: config 0 descriptor?? [ 460.889417][ T2937] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 460.899576][ T2937] asix: probe of 3-1:0.0 failed with error -32 16:50:33 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:33 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 16:50:33 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0xfffffffffffffffd) 16:50:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000580), 0x4) 16:50:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:33 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8930, &(0x7f0000000100)) 16:50:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000580), 0x4) [ 462.387594][ T7253] usb 3-1: USB disconnect, device number 95 16:50:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) 16:50:33 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0xfffffffffffffdf8) [ 462.739388][ T7310] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 3, id = 0 16:50:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) 16:50:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) [ 463.003420][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 463.009324][ T7253] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 463.038276][ T7316] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 3, id = 0 [ 463.259306][ T7253] usb 3-1: Using ep0 maxpacket: 8 [ 463.390310][ T7253] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 463.400526][ T7253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.412428][ T7253] usb 3-1: config 0 descriptor?? [ 464.109493][ T7253] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 464.119550][ T7253] asix: probe of 3-1:0.0 failed with error -32 16:50:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) 16:50:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) 16:50:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) 16:50:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x0, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) 16:50:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) [ 465.428407][ T3706] usb 3-1: USB disconnect, device number 96 [ 465.494109][ T7329] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 3, id = 0 16:50:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) [ 465.945899][ T3883] udevd[3883]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 16:50:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) 16:50:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x1, 'macvlan1\x00'}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'caif0\x00'}, 0x18) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) accept4$inet(r1, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x7, 0x6, 0x7ff, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r2, &(0x7f0000001580)="b45940003c3c96378500d2f2f3687ace89a4f1cb6595d66df15933d54011cafaa8e60ff49681ac1bcc215f4947c557594949e7f38afec82935edaeafb71144f40e0ad65684a1e07d7ec64be8148f1e5e40665cc35b3d1b48eac0d034f6d8f52ae94d68", &(0x7f0000001600)=@udp=r3, 0x5}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000003c0)={"60e4fdf69078667dc5ba965c7f585eb0", r5, 0x0, {0x100, 0x100}, {0x2f1, 0x7}, 0x7fffffff, [0xdd9, 0x200, 0x9, 0x4, 0x0, 0x40, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x800, 0x6, 0x29, 0xffffffffffffffff, 0x5, 0x5530]}) 16:50:37 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890d, 0x0) [ 466.079321][ T3706] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 466.329424][ T3706] usb 3-1: Using ep0 maxpacket: 8 [ 466.449930][ T3706] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 466.459077][ T3706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.471450][ T3706] usb 3-1: config 0 descriptor?? [ 467.179390][ T3706] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 467.189477][ T3706] asix: probe of 3-1:0.0 failed with error -32 16:50:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:50:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x7, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x3) 16:50:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) 16:50:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x11, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) 16:50:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x0, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:39 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]}) 16:50:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000100)) 16:50:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) [ 468.483982][ T3695] usb 3-1: USB disconnect, device number 97 [ 469.181112][ T3695] usb 3-1: new high-speed USB device number 98 using dummy_hcd 16:50:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)=0xffffdffe) 16:50:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:40 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x32, 0x0, &(0x7f0000000100)) [ 470.209337][ T3695] usb 3-1: Using ep0 maxpacket: 8 [ 470.349423][ T3695] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 470.358510][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.367563][ T3695] usb 3-1: config 0 descriptor?? [ 471.059445][ T3695] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 471.069496][ T3695] asix: probe of 3-1:0.0 failed with error -32 16:50:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:50:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x17, 0x0, 0x0) 16:50:43 executing program 0: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:50:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x0, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:43 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8913, &(0x7f0000000100)) 16:50:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:43 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4$inet(r0, 0x0, 0x0, 0x0) 16:50:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0xd, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:50:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$P9_RATTACH(r0, 0x0, 0x0) [ 472.054288][ T5093] usb 3-1: USB disconnect, device number 98 16:50:43 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x1000000, 0x4) [ 472.639884][ T5093] usb 3-1: new high-speed USB device number 99 using dummy_hcd 16:50:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x49}, 0x24}}, 0x0) [ 473.749325][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 473.889494][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 473.898685][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.907768][ T5093] usb 3-1: config 0 descriptor?? [ 474.819441][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 474.829641][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 474.869366][ T5093] asix: probe of 3-1:0.0 failed with error -71 [ 474.877865][ T5093] usb 3-1: USB disconnect, device number 99 16:50:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:50:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='pimreg0\x00'}) 16:50:46 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4063153, r0, 0x0) 16:50:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback}, {}, {0x2, 0x0, @broadcast}}) 16:50:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x31, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:50:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x14, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:50:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 475.686234][ T5093] usb 3-1: new high-speed USB device number 100 using dummy_hcd 16:50:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:47 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) 16:50:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) [ 476.796681][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 477.579371][ T5093] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 477.588573][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.597850][ T5093] usb 3-1: config 0 descriptor?? [ 478.489556][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 478.499990][ T5093] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 478.539370][ T5093] asix: probe of 3-1:0.0 failed with error -71 [ 478.547324][ T5093] usb 3-1: USB disconnect, device number 100 16:50:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 16:50:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x22, 0x0, 0x0) 16:50:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:50 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000040)) 16:50:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:50:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 16:50:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter, 0x48) 16:50:50 executing program 1: socketpair(0x29, 0x5, 0x0, &(0x7f0000000180)) 16:50:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:51 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0) 16:50:51 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, 0x0, 0x7) 16:50:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100001800000000000002000000080001f1"], 0x30}}, 0x0) 16:50:51 executing program 0: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x30000009}) 16:50:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:51 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 480.164758][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 480.169427][ T3692] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 480.189135][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 480.392520][ T7482] nbd: must specify an index to disconnect 16:50:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) [ 481.279801][ T3692] usb 3-1: Using ep0 maxpacket: 8 [ 481.404071][ T3692] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 481.421527][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.526468][ T3692] usb 3-1: config 0 descriptor?? [ 482.439415][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 482.449672][ T3692] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 482.489414][ T3692] asix: probe of 3-1:0.0 failed with error -71 [ 482.497660][ T3692] usb 3-1: USB disconnect, device number 101 16:50:53 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x3a, 0x0, 0x5, 0x8, 0xffff}) 16:50:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100001800000000000002000000080001f1"], 0x30}}, 0x0) 16:50:53 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x20) 16:50:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:53 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 16:50:54 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0x5452, &(0x7f0000000440)) 16:50:54 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1c, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x3}]}, 0x1c}}, 0x0) [ 482.957439][ T7498] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 482.987937][ T7498] nbd: must specify an index to disconnect 16:50:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:55 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) [ 483.996177][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 484.032292][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 16:50:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100001800000000000002000000080001f1"], 0x30}}, 0x0) 16:50:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 16:50:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) 16:50:55 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}) [ 484.439982][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 484.450758][ T7528] nbd: must specify an index to disconnect 16:50:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 16:50:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 16:50:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0xb, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:50:56 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8914, &(0x7f0000000100)) 16:50:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x22, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) 16:50:56 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}) 16:50:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}) 16:50:56 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}) 16:50:56 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 16:50:56 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8914, &(0x7f0000000100)) 16:50:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}) 16:50:56 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8917, &(0x7f0000000100)) 16:50:56 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 16:50:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x15, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0) 16:50:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:57 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) 16:50:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x13, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:50:57 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 16:50:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x8, {{0x2, 0x0, @multicast2}}}, 0x88) 16:50:57 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x4004743c, 0x0) 16:50:57 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000580)=0x80000000, 0x4) 16:50:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x2d, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:50:57 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0xd, 0x0, 0x17) 16:50:57 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x5c8, 0x2f8, 0x1e8, 0x0, 0x4e0, 0x4e0, 0x4e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 'nr0\x00', 'veth0\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}, {{@arp={@broadcast, @local, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @loopback, @multicast1}}}, {{@arp={@remote, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x7f, 'system_u:object_r:unconfined_exec_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x618) [ 486.219047][ T7583] syz-executor.0 (7583) used obsolete PPPIOCDETACH ioctl 16:50:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r2, 0xf, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 16:50:57 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000580)=0x80000000, 0x4) [ 486.603348][ T7590] x_tables: duplicate underflow at hook 1 16:50:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:57 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0xd, 0x0, 0x17) 16:50:57 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x4004743c, 0x0) 16:50:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x4004743c, 0x0) 16:50:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r1, 0x75eb62d588d14f7, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}]}]}, 0x38}}, 0x0) 16:50:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 16:50:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000340)=0x41d, 0x4) 16:50:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x24000000) 16:50:57 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) 16:50:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x28, &(0x7f0000002200)=[@rights={{0x10}}], 0x10}, 0x0) [ 486.966974][ T7609] EXT4-fs warning (device sda1): ext4_group_extend:1858: need to use ext2online to resize further 16:50:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x24000000) 16:50:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 487.475052][ T7618] EXT4-fs warning (device sda1): ext4_group_extend:1858: need to use ext2online to resize further 16:50:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:58 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) 16:50:58 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) 16:50:58 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0xff69) 16:50:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 16:50:58 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="cf4eb39900"}, 0x20, {0x2, 0x0, @empty}, 'veth1_macvtap\x00'}) 16:50:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x29, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) 16:50:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000100)) 16:50:58 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) 16:50:58 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x0, {}, {{0x2, 0x0, @multicast2}}}, 0x108) 16:50:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000340)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c) 16:50:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)) 16:50:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:50:59 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@upd={0xe8, 0x12, 0x21, 0x0, 0x0, {{'pcrypt(aegis128l-aesni)\x00'}}, [{0x8}]}, 0xe8}}, 0x0) 16:50:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000340)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c) 16:50:59 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x0, {}, {{0x2, 0x0, @multicast2}}}, 0x108) 16:50:59 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)) 16:50:59 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x0, {}, {{0x2, 0x0, @multicast2}}}, 0x108) 16:50:59 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8911, &(0x7f0000000100)) 16:50:59 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x203000, 0x1000, 0x80000001, 0x1}, 0x20) 16:50:59 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x28, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 16:50:59 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, 0x0, 0x0) 16:50:59 executing program 0: bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x0, 0xffffffff}) 16:50:59 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 16:51:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x10, 0x0, 0x0) 16:51:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000140)) 16:51:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000300)) 16:51:00 executing program 0: bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x0, 0xffffffff}) 16:51:00 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 16:51:00 executing program 3: bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x0, 0xffffffff}) 16:51:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000), 0x4) 16:51:00 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 16:51:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 16:51:00 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 16:51:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 16:51:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:01 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 16:51:01 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0}, 0x0) 16:51:01 executing program 0: socketpair(0x25, 0x1, 0x3f, &(0x7f0000000000)) 16:51:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 16:51:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 16:51:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 16:51:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 16:51:01 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000380)=[{}], 0x1, 0x3, 0x0, 0x0) 16:51:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) 16:51:01 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x17) 16:51:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 16:51:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x31, 0x0, 0x0) 16:51:02 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000380)=[{}], 0x1, 0x3, 0x0, 0x0) 16:51:02 executing program 2: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000380)=[{}], 0x1, 0x3, 0x0, 0x0) 16:51:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0), &(0x7f0000000140)=0x44) 16:51:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 16:51:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 16:51:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 16:51:02 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x81) 16:51:02 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x81) 16:51:03 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x81) 16:51:04 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x64}, {0x6}]}) 16:51:04 executing program 0: bind(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x7}, 0x8, 0x10, 0x0}, 0x80) r0 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@phonet, &(0x7f0000000100)=0x80, 0x800) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'team0\x00', {0x2, 0x0, @private}}) pipe(&(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000200)={0x0, 0xffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) 16:51:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:04 executing program 0: bind(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x7}, 0x8, 0x10, 0x0}, 0x80) r0 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@phonet, &(0x7f0000000100)=0x80, 0x800) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'team0\x00', {0x2, 0x0, @private}}) pipe(&(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000200)={0x0, 0xffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) 16:51:04 executing program 5: socketpair(0x2b, 0x1, 0x511f, &(0x7f0000000080)) 16:51:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000004c0)={{}, {0x0, @remote}, 0x68, {0x2, 0x0, @multicast2}, 'ip6tnl0\x00'}) 16:51:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) 16:51:05 executing program 5: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x0, 0xa0132, 0xffffffffffffffff, 0x0) 16:51:05 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 16:51:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000100)) 16:51:05 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0xa0132, 0xffffffffffffffff, 0x0) 16:51:05 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001640)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x24008040) 16:51:05 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a0, &(0x7f0000000100)) 16:51:05 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891b, &(0x7f0000000100)) 16:51:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:05 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x28}]}) 16:51:05 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x5c8, 0x2f8, 0x1e8, 0x0, 0x4e0, 0x4e0, 0x4e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nr0\x00', 'veth0\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}, {{@arp={@broadcast, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @loopback, @multicast1}}}, {{@arp={@remote, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:unconfined_exec_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x618) 16:51:05 executing program 2: unshare(0x400) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 16:51:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0x5421, &(0x7f0000000440)) 16:51:05 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}]}, 0x24}}, 0x0) 16:51:05 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) 16:51:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000080)) 16:51:05 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x107200, 0x0) 16:51:05 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) [ 494.479340][ T7788] x_tables: duplicate underflow at hook 1 16:51:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@private0, 0x0, 0x0, 0x0, 0xc}, &(0x7f0000000580)=0x20) 16:51:06 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) 16:51:06 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8924, &(0x7f0000000100)) 16:51:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0xf, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) 16:51:06 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc0045878, 0x0) 16:51:06 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8915, &(0x7f0000000100)) 16:51:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:06 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, 0x0, 0x0) 16:51:06 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 16:51:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000040)={0x4, {{0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {{0xa, 0x4e24, 0x28321f55, @remote, 0x1}}, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0xb80}}]}, 0x210) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000280), &(0x7f0000000300)=0x6e, 0x180000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'tunl0\x00', 0x1}, 0x18) 16:51:06 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 16:51:06 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 16:51:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) 16:51:06 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreq(r0, 0x0, 0x3, 0x0, &(0x7f00000000c0)) 16:51:06 executing program 2: syz_emit_ethernet(0x56, &(0x7f00000001c0)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 16:51:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x21, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) 16:51:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x100000a) 16:51:06 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 16:51:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:07 executing program 3: socket$inet(0x2, 0xa, 0x9) 16:51:07 executing program 2: syz_emit_ethernet(0x56, &(0x7f00000001c0)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 16:51:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "79ce9292107450624ba8e147449ba3eed2a900d76b9ff94c05e3814f46344725", "793875f7cf280ad681d1b5079b0ea3d658a3932812bbedf3030858972151313c"}}}]}, 0x268}}, 0x0) 16:51:07 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b0, &(0x7f0000000100)) 16:51:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x10, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) 16:51:07 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8982, 0x0) 16:51:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) 16:51:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:51:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {0xd}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 16:51:07 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0xa5, &(0x7f0000000080)=""/165, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:51:07 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0xa5, &(0x7f0000000080)=""/165, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:51:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 16:51:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {}, {}, {0x2, 0x0, @multicast2}, 0x36c}) 16:51:08 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000040)) 16:51:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 16:51:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {0xd}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 16:51:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {0xd}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 16:51:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {0xd}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 16:51:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) r1 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) getpeername$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'wg0\x00'}, 0x18) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'rose0\x00', 0x4}, 0x18) 16:51:08 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x35}, 0x14) 16:51:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000180)={0xffffffffffffffb9, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f00000002c0), &(0x7f0000000300)=0x8) 16:51:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, 0x0, 0x0) [ 497.172707][ T7887] IPVS: Unknown mcast interface: rose0 16:51:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) r1 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) getpeername$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'wg0\x00'}, 0x18) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'rose0\x00', 0x4}, 0x18) 16:51:08 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000480)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0) 16:51:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000180)={0xffffffffffffffb9, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f00000002c0), &(0x7f0000000300)=0x8) 16:51:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000180)={0xffffffffffffffb9, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f00000002c0), &(0x7f0000000300)=0x8) 16:51:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, 0x0, 0x0) 16:51:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, 0x0, 0x0) 16:51:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000300)) 16:51:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x22, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:51:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x32, 0x0, 0x0) [ 498.014962][ T7906] IPVS: Unknown mcast interface: rose0 16:51:09 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) gettid() sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 16:51:09 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_addr=@multicast2}, 0x10) 16:51:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) 16:51:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) 16:51:09 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6}, {0x6}]}) 16:51:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:09 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xf, 0x0, 0xd) 16:51:09 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x1f}]}) 16:51:09 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6}, {}, {0x6}]}) 16:51:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) 16:51:09 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6}, {0x6}]}) 16:51:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x0, 'bridge0\x00'}) 16:51:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x2b, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:51:09 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 16:51:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x0, 'bridge0\x00'}) 16:51:10 executing program 1: r0 = epoll_create(0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000004}) 16:51:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f00000000c0)=""/121, &(0x7f0000000040)=0x79) 16:51:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) 16:51:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:10 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 16:51:10 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 16:51:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0xa, 0x0, 0x0) 16:51:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0xc, 0x0, 0x0) 16:51:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x25, &(0x7f0000000040), 0x4) 16:51:10 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc0189436, &(0x7f0000000100)) 16:51:10 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 16:51:10 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8970, &(0x7f0000000100)) 16:51:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:10 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000080)) 16:51:10 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0xa46}]}) 16:51:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 16:51:11 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000240)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 16:51:11 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) 16:51:11 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000080)) 16:51:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:11 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0xa46}]}) 16:51:11 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0xa46}]}) 16:51:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x10, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:51:11 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080), 0x4) 16:51:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x0, 0x850}, 0x48) 16:51:11 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) recvmsg$can_raw(r0, 0x0, 0x0) 16:51:11 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@upd={0xe0, 0x12, 0x21, 0x0, 0x0, {{'pcrypt(aegis128l-aesni)\x00'}}}, 0xe0}}, 0x0) 16:51:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x13, 0x0, 0x0) 16:51:11 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$qrtr(r0, 0x0, &(0x7f0000000040)) 16:51:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040), 0x4) [ 501.291582][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.298140][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 16:51:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:12 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x3, &(0x7f0000000040)={0x0}, 0x20) 16:51:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000000)) 16:51:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000000)) 16:51:12 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x28, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}}, 0x0) 16:51:12 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xa0132, 0xffffffffffffffff, 0x0) 16:51:12 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 16:51:12 executing program 0: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x7}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:51:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, 0x0, 0x88) 16:51:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000022) sendmsg$unix(r1, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) 16:51:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @private}, 0x44}) 16:51:12 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, 0x0, 0x7) 16:51:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmmsg$unix(r0, &(0x7f0000000a40)=[{{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 16:51:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @private}, 0x44}) 16:51:13 executing program 0: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x7}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:51:13 executing program 5: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x7}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:51:13 executing program 1: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x7}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:51:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:13 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 16:51:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x25, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:51:13 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, 0x0, 0x0) 16:51:13 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0x4a0, 0x0, 0xffffffff, 0x4a0, 0x4a0, 0x6b0, 0x6b0, 0xffffffff, 0x6b0, 0x6b0, 0x5, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bond0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x0, 0xa4}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:null_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 16:51:13 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x40000063, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) 16:51:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x38, r1, 0x75eb62d588d14f7, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xfd}]}]}]}, 0x38}}, 0x0) 16:51:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x5, 0x119c, [], 0x0, 0x0, &(0x7f0000000880)=[{}, {0x0, '\x00', 0x2, 0x0, 0x1, [{0x0, 0x0, 0x0, 'netpci0\x00', 'bond_slave_1\x00', 'batadv_slave_0\x00', 'team_slave_1\x00', @remote, [], @multicast, [], 0x856, 0x856, 0x886, [@u32={{'u32\x00', 0x0, 0x7c0}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 'lo\x00', 'ipvlan1\x00', 'bridge_slave_0\x00', 'veth0_to_bridge\x00', @dev, [], @link_local, [], 0x856, 0x856, 0x886, [@u32={{'u32\x00', 0x0, 0x7c0}}], [], @common=@STANDARD={'\x00', 0x8}}]}]}, 0x1214) 16:51:13 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0x4a0, 0x0, 0xffffffff, 0x4a0, 0x4a0, 0x6b0, 0x6b0, 0xffffffff, 0x6b0, 0x6b0, 0x5, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bond0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x0, 0xa4}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:null_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 16:51:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x25, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:51:13 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x40000063, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) 16:51:13 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0x4a0, 0x0, 0xffffffff, 0x4a0, 0x4a0, 0x6b0, 0x6b0, 0xffffffff, 0x6b0, 0x6b0, 0x5, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bond0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x0, 0xa4}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:null_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 16:51:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x38, r1, 0x75eb62d588d14f7, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xfd}]}]}]}, 0x38}}, 0x0) 16:51:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x38, r1, 0x75eb62d588d14f7, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xfd}]}]}]}, 0x38}}, 0x0) 16:51:14 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r0, 0x1}, 0x14}}, 0x0) 16:51:14 executing program 5: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x7}) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) 16:51:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x45, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:51:14 executing program 5: socket$inet6(0xa, 0x3, 0x101) 16:51:14 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) 16:51:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), 0x4) 16:51:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) 16:51:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 16:51:14 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000580)=0x80000000, 0x4) 16:51:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f00000003c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'wg0\x00'}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) 16:51:15 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c}, {0x6}]}) 16:51:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) 16:51:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 16:51:15 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000580)=0x80000000, 0x4) 16:51:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 16:51:15 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x30}}, 0x0) 16:51:15 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, 0x0}}], 0x1, 0x0) 16:51:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f00000003c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'wg0\x00'}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) 16:51:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x21, 0x0, 0x0) 16:51:15 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:15 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x30}}, 0x0) 16:51:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x30}}, 0x0) 16:51:15 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:15 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x7, 0x0, 0x0) 16:51:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040), 0x18) 16:51:15 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0x40086602, &(0x7f0000000440)) 16:51:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 16:51:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000600)) 16:51:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 16:51:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, 0x0, 0x7) 16:51:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x42, &(0x7f0000000040), 0x4) 16:51:16 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 16:51:16 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000003c0)) sendmmsg$unix(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18}}], 0x2, 0x0) 16:51:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x0, 0xffffffff}) 16:51:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x12, 0x0, 0x0) 16:51:16 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 16:51:16 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) 16:51:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) 16:51:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0xd, 0x0, 0x0) 16:51:16 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc020660b, 0x0) 16:51:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x31, &(0x7f0000000380)={0x0, 'macvlan1\x00'}, 0x18) 16:51:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000280)) 16:51:16 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) 16:51:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:51:16 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) 16:51:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1d, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:51:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) 16:51:16 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) 16:51:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:51:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) 16:51:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1d, &(0x7f0000000040)={0xfffffffd}, 0x4) 16:51:17 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) 16:51:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000039555c0bf9a0b41fd5780a060016e55fae3514018000000000a6916cd20000cfb7ff5befb15439e02e252c0000000000000000000000007240984f42f5f0469d1074ab0d04dd7a9d9d8296eb9eb9d0e991e0e3f63eff6fccc58f5bf23c40991368b1ae66fc31dac7fb722fa60cf033d2c1fcabfd004c1c160c9f91a723746725f448950c9d4a045dd3a6c4b65bd57313d0c358dcb784664d71a405a93a0df8970000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x40000000) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288}, 0x38) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffff12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x36, 0x18}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002780)={&(0x7f0000002740)='./file0\x00', 0x0, 0x18}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0x8001, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000080) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000000c0)) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 16:51:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) 16:51:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 16:51:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0xb, 0x0, 0x0) 16:51:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x19, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@rights={{0x10, 0x2}}], 0x10}, 0x0) 16:51:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)={0x5, 0x2}) prlimit64(r0, 0x2, &(0x7f00000000c0)={0x100, 0x3}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240), 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) 16:51:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7}, 0x48) 16:51:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000039555c0bf9a0b41fd5780a060016e55fae3514018000000000a6916cd20000cfb7ff5befb15439e02e252c0000000000000000000000007240984f42f5f0469d1074ab0d04dd7a9d9d8296eb9eb9d0e991e0e3f63eff6fccc58f5bf23c40991368b1ae66fc31dac7fb722fa60cf033d2c1fcabfd004c1c160c9f91a723746725f448950c9d4a045dd3a6c4b65bd57313d0c358dcb784664d71a405a93a0df8970000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x40000000) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288}, 0x38) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffff12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x36, 0x18}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002780)={&(0x7f0000002740)='./file0\x00', 0x0, 0x18}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0x8001, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000080) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000000c0)) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 16:51:18 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000039555c0bf9a0b41fd5780a060016e55fae3514018000000000a6916cd20000cfb7ff5befb15439e02e252c0000000000000000000000007240984f42f5f0469d1074ab0d04dd7a9d9d8296eb9eb9d0e991e0e3f63eff6fccc58f5bf23c40991368b1ae66fc31dac7fb722fa60cf033d2c1fcabfd004c1c160c9f91a723746725f448950c9d4a045dd3a6c4b65bd57313d0c358dcb784664d71a405a93a0df8970000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x40000000) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288}, 0x38) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffff12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x36, 0x18}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002780)={&(0x7f0000002740)='./file0\x00', 0x0, 0x18}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0x8001, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000080) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000000c0)) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 16:51:18 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000039555c0bf9a0b41fd5780a060016e55fae3514018000000000a6916cd20000cfb7ff5befb15439e02e252c0000000000000000000000007240984f42f5f0469d1074ab0d04dd7a9d9d8296eb9eb9d0e991e0e3f63eff6fccc58f5bf23c40991368b1ae66fc31dac7fb722fa60cf033d2c1fcabfd004c1c160c9f91a723746725f448950c9d4a045dd3a6c4b65bd57313d0c358dcb784664d71a405a93a0df8970000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x40000000) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288}, 0x38) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffff12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x36, 0x18}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002780)={&(0x7f0000002740)='./file0\x00', 0x0, 0x18}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0x8001, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000080) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000000c0)) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 16:51:18 executing program 0: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)={0x20000000}) 16:51:18 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 506.724162][ T8220] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 507.595910][ T8246] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 16:51:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 507.613971][ T8248] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 508.104255][ T8257] bridge0: port 3(erspan0) entered blocking state [ 508.120508][ T8257] bridge0: port 3(erspan0) entered disabled state [ 508.127793][ T8257] device erspan0 entered promiscuous mode [ 508.134086][ T8257] bridge0: port 3(erspan0) entered blocking state [ 508.140608][ T8257] bridge0: port 3(erspan0) entered forwarding state [ 508.147842][ T8254] bridge0: port 3(erspan0) entered blocking state [ 508.154496][ T8254] bridge0: port 3(erspan0) entered disabled state [ 508.161793][ T8254] device erspan0 entered promiscuous mode [ 508.167859][ T8254] bridge0: port 3(erspan0) entered blocking state [ 508.174377][ T8254] bridge0: port 3(erspan0) entered forwarding state 16:51:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x4, 0x0, 0x0) [ 508.200270][ T8258] bridge0: port 3(erspan0) entered blocking state [ 508.207845][ T8258] bridge0: port 3(erspan0) entered disabled state [ 508.215196][ T8258] device erspan0 entered promiscuous mode [ 508.221573][ T8258] bridge0: port 3(erspan0) entered blocking state [ 508.228072][ T8258] bridge0: port 3(erspan0) entered forwarding state 16:51:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x4) 16:51:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x890d, 0x0) 16:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x5f}]}}, &(0x7f00000004c0)=""/252, 0x26, 0xfc, 0x1}, 0x20) 16:51:19 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) 16:51:19 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/173, 0x1a, 0xad, 0x1}, 0x20) 16:51:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='io\x00') read$FUSE(r0, &(0x7f0000000cc0)={0x2020}, 0xfffffffffffffe35) 16:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0) 16:51:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') 16:51:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, &(0x7f0000000280)) 16:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:19 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000004c0)=""/252, 0x1a, 0xfc, 0x1}, 0x20) 16:51:19 executing program 3: socket$packet(0x11, 0x6dbe150acbdea427, 0x300) 16:51:19 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f00000000c0)=""/208, 0x29, 0xd0, 0x1}, 0x20) 16:51:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, &(0x7f0000000280)) 16:51:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@func]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xdb, &(0x7f0000000100)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:51:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8982, &(0x7f0000000280)) 16:51:19 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000780)=""/231, 0x1a, 0xe7, 0x1}, 0x20) 16:51:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x2000}], 0x1) 16:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x700}]}}, &(0x7f00000004c0)=""/252, 0x26, 0xfc, 0x1}, 0x20) 16:51:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d8000000000000000100000002"], 0xf8}, 0x0) 16:51:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x18, 0x3, 0x1, 0x103, 0x0, 0x0, {}, [@CTA_SYNPROXY={0x4}]}, 0x18}}, 0x0) 16:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:19 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001640)='/sys/block/ram9', 0x20000, 0x0) 16:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:19 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x2a, 0x0, 0xc, 0xc, 0x6, [@typedef]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000004c0)=""/252, 0x2a, 0xfc, 0x1}, 0x20) 16:51:19 executing program 4: timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000200)) 16:51:19 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000080)={@multicast, @local, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "382db766f45baac4c6cff015c283717e61875f6d3d742cef3c6cd59b97d67ee0e7d86cfa340e55d35bece4eac8952844d45131f83c411c36e9cf95b8fca75c38"}}}}, 0x0) 16:51:20 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/4\x00') 16:51:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x3, 0x80}]}]}}, &(0x7f0000000340)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 16:51:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000080)) 16:51:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 16:51:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000780)=""/231, 0x32, 0xe7, 0x1}, 0x20) 16:51:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 16:51:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8913, &(0x7f0000000280)) 16:51:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000000180)=""/173, 0x2a, 0xad, 0x1}, 0x20) 16:51:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x80108906, 0x0) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000280)) 16:51:20 executing program 4: socket$inet6(0xa, 0x0, 0x7fffffff) 16:51:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f00000000c0)=""/208, 0x29, 0xd0, 0x1}, 0x20) 16:51:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 1: bpf$BPF_BTF_LOAD(0x2, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 16:51:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000004c0)=""/252, 0x5f5e0ff, 0xfc}, 0x20) 16:51:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000280)) 16:51:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10}, 0x48) 16:51:20 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000004c0)=""/252, 0x1a, 0xfc, 0x1}, 0x20) 16:51:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x2, 0x0, 0x10000}, 0x48) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffe) 16:51:20 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x401) 16:51:20 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) 16:51:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0xf}, 0x0) 16:51:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x883, 0x0, 0x0, 0x584}, 0x48) 16:51:20 executing program 4: modify_ldt$write(0x1, &(0x7f0000000040), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0fc7bb29660000b9800000c00f3235000100000f30b8010000000f01d9f26f0f2261ea370000008300c4c37d4b7d0600b9800000c00f3235004000000f3066baf80cb89c10d288ef66bafc0cb800100000eff0819c7fbdffffff64000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:51:20 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8919, &(0x7f0000000280)) 16:51:20 executing program 1: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/109) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540), 0x8, 0x10, 0x0}, 0x80) openat$cuse(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000600)={{0x77359400}}, 0x0) 16:51:20 executing program 3: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) dup3(r1, r0, 0x0) 16:51:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x44, 0x29, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}, {0xffff, 0x10}}, [@TCA_RATE={0x6}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6}, @tclass_kind_options=@c_tbf={0x8}]}, 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0fc7bb29660000b9800000c00f3235000100000f30b8010000000f01d9f26f0f2261ea370000008300c4c37d4b7d0600b9800000c00f3235004000000f3066baf80cb89c10d288ef66bafc0cb800100000eff0819c7fbdffffff64000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0xe20798a67e05ebfa, &(0x7f0000000000)=[{0x0}], 0x35}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 16:51:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000800000000000000060000008520"], &(0x7f0000000040)='GPL\x00', 0x5, 0xf5, &(0x7f0000000180)=""/245, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 4: modify_ldt$write(0x1, &(0x7f0000000040), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0fc7bb29660000b9800000c00f3235000100000f30b8010000000f01d9f26f0f2261ea370000008300c4c37d4b7d0600b9800000c00f3235004000000f3066baf80cb89c10d288ef66bafc0cb800100000eff0819c7fbdffffff64000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:51:20 executing program 2: memfd_create(&(0x7f00000008c0)='\x00', 0x2) 16:51:20 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002b40)={{0x1, 0xee01, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 16:51:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x44, 0x29, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}, {0xffff, 0x10}}, [@TCA_RATE={0x6}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6}, @tclass_kind_options=@c_tbf={0x8}]}, 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0fc7bb29660000b9800000c00f3235000100000f30b8010000000f01d9f26f0f2261ea370000008300c4c37d4b7d0600b9800000c00f3235004000000f3066baf80cb89c10d288ef66bafc0cb800100000eff0819c7fbdffffff64000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0xe20798a67e05ebfa, &(0x7f0000000000)=[{0x0}], 0x35}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:51:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = memfd_create(&(0x7f00000006c0)='\x00', 0x0) write(r1, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:51:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:20 executing program 2: bpf$BPF_BTF_LOAD(0x4, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 16:51:21 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) 16:51:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:21 executing program 4: modify_ldt$write(0x1, &(0x7f0000000040), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0fc7bb29660000b9800000c00f3235000100000f30b8010000000f01d9f26f0f2261ea370000008300c4c37d4b7d0600b9800000c00f3235004000000f3066baf80cb89c10d288ef66bafc0cb800100000eff0819c7fbdffffff64000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:51:21 executing program 2: msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) 16:51:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x44, 0x29, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}, {0xffff, 0x10}}, [@TCA_RATE={0x6}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6}, @tclass_kind_options=@c_tbf={0x8}]}, 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0fc7bb29660000b9800000c00f3235000100000f30b8010000000f01d9f26f0f2261ea370000008300c4c37d4b7d0600b9800000c00f3235004000000f3066baf80cb89c10d288ef66bafc0cb800100000eff0819c7fbdffffff64000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0xe20798a67e05ebfa, &(0x7f0000000000)=[{0x0}], 0x35}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:51:21 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) 16:51:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89a0, 0x0) 16:51:21 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x1, 0x2800) 16:51:21 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4$packet(r0, 0x0, 0x0, 0x769815ffba175a08) 16:51:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x44, 0x29, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}, {0xffff, 0x10}}, [@TCA_RATE={0x6}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6}, @tclass_kind_options=@c_tbf={0x8}]}, 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0fc7bb29660000b9800000c00f3235000100000f30b8010000000f01d9f26f0f2261ea370000008300c4c37d4b7d0600b9800000c00f3235004000000f3066baf80cb89c10d288ef66bafc0cb800100000eff0819c7fbdffffff64000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0xe20798a67e05ebfa, &(0x7f0000000000)=[{0x0}], 0x35}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:51:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:21 executing program 4: modify_ldt$write(0x1, &(0x7f0000000040), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0fc7bb29660000b9800000c00f3235000100000f30b8010000000f01d9f26f0f2261ea370000008300c4c37d4b7d0600b9800000c00f3235004000000f3066baf80cb89c10d288ef66bafc0cb800100000eff0819c7fbdffffff64000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:51:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:21 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x23c355ecb10a78e8) 16:51:21 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) 16:51:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) ioctl$SG_BLKTRACESTOP(r0, 0x5385, 0x7fffffffefff) 16:51:21 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x0, 0xfffffdfd}) 16:51:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) 16:51:21 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0xd7, ""/215}) 16:51:21 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9}}}, 0x8) 16:51:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}) 16:51:21 executing program 5: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:21 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hci_vhci', 0xf6ffffff, 0x0) 16:51:22 executing program 4: syz_open_dev$sndpcmc(0xffffffffffffffff, 0x0, 0x0) 16:51:22 executing program 5: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 3: r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040), 0x10) 16:51:22 executing program 2: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000005c0)={&(0x7f00000004c0), 0x70, &(0x7f0000000580)={&(0x7f0000000300)={0x30, r0, 0xb, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE, @L2TP_ATTR_VLAN_ID={0xfffffffffffffd7b}]}, 0x30}}, 0x0) 16:51:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x6, 0x9, 0xa1, 0x10}, 0x48) 16:51:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$packet(r0, 0x0, 0x0) 16:51:22 executing program 5: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 4: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) 16:51:22 executing program 5: pipe(0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x6000, 0x1) chown(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 16:51:22 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000001580)='./file0/file0\x00', 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00') [ 511.265633][ T8573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 16:51:22 executing program 5: pipe(0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @random="07ae32dc4c4e", @val, {@ipv4}}, 0x0) 16:51:22 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001280)=""/138, 0x1a, 0x8a, 0x1}, 0x20) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x400}, 0xe) 16:51:22 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0x7ff}, 0x10) 16:51:22 executing program 5: pipe(0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000b0000000b000000005000000000000000300000d000000000d0000000500000009000000030000000e000000050000000a0000000000000201000000070000000000000e03000000010000000500000004000006040000000393880a4420268b0e5e815d850bdb0000000300000001000000ffff000002050000000b00000000000001000000a706000000000000000000000205000000040000000000000201000000005d007706050000000000000903000000000030300021c06391d6877862"], &(0x7f0000000400)=""/183, 0xcd, 0xb7, 0x1}, 0x20) 16:51:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x40086602, &(0x7f0000000180)=ANY=[@ANYBLOB="04000086"]) 16:51:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7, 0x0, @adapter={0x6}}]}) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008aec1, &(0x7f0000000180)=ANY=[]) 16:51:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}, 0x1, 0x0, 0x932c0000}, 0x0) 16:51:22 executing program 2: bpf$BPF_GET_BTF_INFO(0xb, 0x0, 0x0) 16:51:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x40049409, &(0x7f0000000180)=ANY=[]) 16:51:22 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x432) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 16:51:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4020940d, 0x0) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7, 0x0, @adapter={0x6}}]}) 16:51:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) syz_clone3(&(0x7f00000001c0)={0x140800000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0xf}, &(0x7f0000000280)=""/11, 0xb, &(0x7f0000000100)=""/115, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x7) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1b, 0xa9, @random="26c5547a6e400d482a6dba732b6607e188d978bef13c49"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9f, 0xa9, @random="fe46e7cb386a1032f4a125226838dd5762e9fcb1f9a817f7fbc5845e91a0ee884ef6ac047ec091c08dd13cc36fb8d46554597300774135c47491e687dd432dd40d21e90f5d70de04794f0a1c49eb6249f3ef8ca937810c7397723dd4d6b8975b3686746698b9a837c269a4e60d125bc866ca5f27dc6d876e409ad42d1f174b1997b1cc50a1e3d835ab8cc1652d2f13d100709147d6bc1b7c7b7a5f"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000003780), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000004c0)={0x3, [0x0, 0x0, 0x0]}) 16:51:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)) 16:51:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 511.587827][ T28] audit: type=1804 audit(1665075082.590:16): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1996138472/syzkaller.Jxw9HV/223/bus" dev="sda1" ino=1160 res=1 errno=0 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000040)={0x7, 0x0, 0x10000}, 0x0) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000140)=""/197, 0x37, 0xc5, 0x1}, 0x20) 16:51:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x9}, 0xe) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0xd, 0x4) 16:51:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7, 0x0, @adapter={0x6}}]}) 16:51:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) syz_clone3(&(0x7f00000001c0)={0x140800000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0xf}, &(0x7f0000000280)=""/11, 0xb, &(0x7f0000000100)=""/115, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x7) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1b, 0xa9, @random="26c5547a6e400d482a6dba732b6607e188d978bef13c49"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9f, 0xa9, @random="fe46e7cb386a1032f4a125226838dd5762e9fcb1f9a817f7fbc5845e91a0ee884ef6ac047ec091c08dd13cc36fb8d46554597300774135c47491e687dd432dd40d21e90f5d70de04794f0a1c49eb6249f3ef8ca937810c7397723dd4d6b8975b3686746698b9a837c269a4e60d125bc866ca5f27dc6d876e409ad42d1f174b1997b1cc50a1e3d835ab8cc1652d2f13d100709147d6bc1b7c7b7a5f"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000003780), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000004c0)={0x3, [0x0, 0x0, 0x0]}) 16:51:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x3a, 0x32, 0x0, 0x0) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x48, 0x0, 0x0) 16:51:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7, 0x0, @adapter={0x6}}]}) 16:51:23 executing program 3: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x5}, 0x0, 0x0, 0x0) 16:51:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{0x0}, {&(0x7f00000011c0)="b1", 0x1}], 0x2}}, {{&(0x7f0000001480)={0xa, 0x4e23, 0x0, @private1, 0xfffff000}, 0x1c, 0x0}}], 0x2, 0x0) 16:51:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) syz_clone3(&(0x7f00000001c0)={0x140800000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0xf}, &(0x7f0000000280)=""/11, 0xb, &(0x7f0000000100)=""/115, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x7) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1b, 0xa9, @random="26c5547a6e400d482a6dba732b6607e188d978bef13c49"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9f, 0xa9, @random="fe46e7cb386a1032f4a125226838dd5762e9fcb1f9a817f7fbc5845e91a0ee884ef6ac047ec091c08dd13cc36fb8d46554597300774135c47491e687dd432dd40d21e90f5d70de04794f0a1c49eb6249f3ef8ca937810c7397723dd4d6b8975b3686746698b9a837c269a4e60d125bc866ca5f27dc6d876e409ad42d1f174b1997b1cc50a1e3d835ab8cc1652d2f13d100709147d6bc1b7c7b7a5f"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000003780), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000004c0)={0x3, [0x0, 0x0, 0x0]}) 16:51:23 executing program 1: io_setup(0x4, &(0x7f0000000280)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:51:23 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) 16:51:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x78, 0x0, 0x0) 16:51:23 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0x401c5820, 0x0) 16:51:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:23 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 16:51:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:23 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x8001, 0x8) 16:51:23 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0x5460, 0x0) 16:51:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) syz_clone3(&(0x7f00000001c0)={0x140800000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0xf}, &(0x7f0000000280)=""/11, 0xb, &(0x7f0000000100)=""/115, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x7) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1b, 0xa9, @random="26c5547a6e400d482a6dba732b6607e188d978bef13c49"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9f, 0xa9, @random="fe46e7cb386a1032f4a125226838dd5762e9fcb1f9a817f7fbc5845e91a0ee884ef6ac047ec091c08dd13cc36fb8d46554597300774135c47491e687dd432dd40d21e90f5d70de04794f0a1c49eb6249f3ef8ca937810c7397723dd4d6b8975b3686746698b9a837c269a4e60d125bc866ca5f27dc6d876e409ad42d1f174b1997b1cc50a1e3d835ab8cc1652d2f13d100709147d6bc1b7c7b7a5f"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000003780), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000004c0)={0x3, [0x0, 0x0, 0x0]}) 16:51:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 16:51:23 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) 16:51:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 16:51:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0xf0) 16:51:23 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) 16:51:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 16:51:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:23 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x498283, 0x0) 16:51:23 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x1) 16:51:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 16:51:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 16:51:24 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x2}]}]}}, &(0x7f00000015c0)=""/238, 0x36, 0xee, 0x1}, 0x20) 16:51:24 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 16:51:24 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:24 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0), 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:24 executing program 3: getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setregid(0xee00, r0) 16:51:24 executing program 4: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r1, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000440)="1a", 0x1}, {0x0}], 0x3) 16:51:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:24 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0) 16:51:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_batadv\x00'}, 0x18) 16:51:24 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0), 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:24 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000009b80), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 16:51:24 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000340)) 16:51:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 16:51:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:51:24 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000009b80), 0x28040, 0x0) [ 513.258240][ T8757] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 16:51:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 16:51:24 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0), 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 16:51:24 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 16:51:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}}, 0xa0) 16:51:24 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) [ 513.769413][ T3692] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 513.849303][ T3661] Bluetooth: hci5: command 0x0405 tx timeout [ 514.019388][ T3692] usb 1-1: Using ep0 maxpacket: 32 16:51:25 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000009b80), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000009b40), r0) 16:51:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:25 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 16:51:25 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r0, 0x0, &(0x7f0000000c40)) 16:51:25 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:25 executing program 1: add_key(&(0x7f0000000680)='keyring\x00', 0x0, &(0x7f00000008c0), 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000340)="69bdbce14616487ea2d692203d222df13af63e2d23643a4f18e09643426e5e4cf045a2035b4cf42778b0b2526fb192da557fc4e9e87d1634e7b980a6ad943902c7ad08c4767942909572fb092d957d855eaa5a560334b37ab05b34764ed166ae845e01f3d4f0e62ef10aadb96c663396ed4fafe0bc1d77a8e7b2f597feeb4d34e48ac5192de1712a5cf26c006204977be9411631c3fbcaaf7cf81a242270f7d89c963fbb5568372c068e0d37f043207f5d638a7ee537ed18ff35078dde1b8e199b95f7cf46fa6611e34412ad94ce4c1376c2be3f81dc7b338e6493abbd6572fc2c019ebe8cfcca09d973662a236efe6cbb3b31f86e082e", 0xf7, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x40000000000017f, 0x0) 16:51:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000006c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) 16:51:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x3, 0xc11, 0x3, 0x586f}}) 16:51:25 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x283}) [ 514.362395][ T3692] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 514.379846][ T3692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.427365][ T3692] usb 1-1: Product: syz [ 514.451404][ T3692] usb 1-1: Manufacturer: syz [ 514.464948][ T3692] usb 1-1: SerialNumber: syz [ 514.483307][ T3692] usb 1-1: config 0 descriptor?? [ 515.205198][ T3692] usb 1-1: USB disconnect, device number 3 16:51:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x5c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "04002881aedfaadc"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xff}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "02c6de725de871a6"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@nl=@kern={0x10, 0x0, 0x0, 0x40000}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="0972fb0090ecf10c73131520b4ca79955b315a63f7b0d4eab60f00fb9176a9a4b01c809095e2b228347e620c74ee08237eb66187cbba9de477b4e75c8380e433060fe69a33d72a838d1172db98d6737051a931d9d92805845a79df6ff0ab6087f8ff22570f5f653884a5bec9ba380fcb5ee8ca681ca25ba375", @ANYRES16=r5, @ANYRESDEC=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x252}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000804}, 0x4008084) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x1, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x30000000}, 0x80) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x1b, 0x2, 0x200, &(0x7f0000000440)="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"}) ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000000080)=""/77) 16:51:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:26 executing program 1: add_key(&(0x7f0000000680)='keyring\x00', 0x0, &(0x7f00000008c0), 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000340)="69bdbce14616487ea2d692203d222df13af63e2d23643a4f18e09643426e5e4cf045a2035b4cf42778b0b2526fb192da557fc4e9e87d1634e7b980a6ad943902c7ad08c4767942909572fb092d957d855eaa5a560334b37ab05b34764ed166ae845e01f3d4f0e62ef10aadb96c663396ed4fafe0bc1d77a8e7b2f597feeb4d34e48ac5192de1712a5cf26c006204977be9411631c3fbcaaf7cf81a242270f7d89c963fbb5568372c068e0d37f043207f5d638a7ee537ed18ff35078dde1b8e199b95f7cf46fa6611e34412ad94ce4c1376c2be3f81dc7b338e6493abbd6572fc2c019ebe8cfcca09d973662a236efe6cbb3b31f86e082e", 0xf7, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x40000000000017f, 0x0) 16:51:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:26 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8c80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x3, 0xc11, 0x3, 0x586f}, 0x50e4}) 16:51:26 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:51:26 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@txtime={{0x18}}], 0x18}, 0x0) [ 515.729735][ T8823] bridge0: port 4(team0) entered blocking state [ 515.736063][ T8823] bridge0: port 4(team0) entered disabled state 16:51:26 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000003b00), 0x14) sendmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:26 executing program 3: socketpair(0x2, 0x0, 0x300, &(0x7f0000000000)) 16:51:26 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 515.814997][ T8823] device team0 entered promiscuous mode [ 515.815062][ T8823] device team_slave_0 entered promiscuous mode [ 515.815173][ T8823] device team_slave_1 entered promiscuous mode [ 515.815583][ T8823] bridge0: port 4(team0) entered blocking state 16:51:26 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000003b00), 0x14) sendmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'virt_wifi0\x00', 0x2}) [ 515.815655][ T8823] bridge0: port 4(team0) entered forwarding state [ 516.010030][ T7253] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 516.249387][ T7253] usb 1-1: Using ep0 maxpacket: 32 [ 516.569470][ T7253] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 516.578519][ T7253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.587741][ T7253] usb 1-1: Product: syz [ 516.592031][ T7253] usb 1-1: Manufacturer: syz [ 516.596651][ T7253] usb 1-1: SerialNumber: syz [ 516.603755][ T7253] usb 1-1: config 0 descriptor?? [ 517.293697][ T7253] usb 1-1: USB disconnect, device number 4 [ 517.307842][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:51:28 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:28 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x5c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "04002881aedfaadc"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xff}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "02c6de725de871a6"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@nl=@kern={0x10, 0x0, 0x0, 0x40000}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="0972fb0090ecf10c73131520b4ca79955b315a63f7b0d4eab60f00fb9176a9a4b01c809095e2b228347e620c74ee08237eb66187cbba9de477b4e75c8380e433060fe69a33d72a838d1172db98d6737051a931d9d92805845a79df6ff0ab6087f8ff22570f5f653884a5bec9ba380fcb5ee8ca681ca25ba375", @ANYRES16=r5, @ANYRESDEC=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x252}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000804}, 0x4008084) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x1, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x30000000}, 0x80) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x1b, 0x2, 0x200, &(0x7f0000000440)="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"}) ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000000080)=""/77) 16:51:28 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x8}]}]}}, &(0x7f0000000ac0)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 16:51:28 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000003b00), 0x14) sendmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:28 executing program 1: add_key(&(0x7f0000000680)='keyring\x00', 0x0, &(0x7f00000008c0), 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000340)="69bdbce14616487ea2d692203d222df13af63e2d23643a4f18e09643426e5e4cf045a2035b4cf42778b0b2526fb192da557fc4e9e87d1634e7b980a6ad943902c7ad08c4767942909572fb092d957d855eaa5a560334b37ab05b34764ed166ae845e01f3d4f0e62ef10aadb96c663396ed4fafe0bc1d77a8e7b2f597feeb4d34e48ac5192de1712a5cf26c006204977be9411631c3fbcaaf7cf81a242270f7d89c963fbb5568372c068e0d37f043207f5d638a7ee537ed18ff35078dde1b8e199b95f7cf46fa6611e34412ad94ce4c1376c2be3f81dc7b338e6493abbd6572fc2c019ebe8cfcca09d973662a236efe6cbb3b31f86e082e", 0xf7, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x40000000000017f, 0x0) 16:51:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x0, 0x0, 0xffffff47, 0x0, 0x1}, 0x48) 16:51:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000003b00)={0x11, 0x0, r1}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) 16:51:28 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000003b00)={0x11, 0x0, r1}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x1c) [ 518.119457][ T3695] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 518.379285][ T3695] usb 1-1: Using ep0 maxpacket: 32 [ 518.709366][ T3695] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 518.718474][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.726578][ T3695] usb 1-1: Product: syz [ 518.730854][ T3695] usb 1-1: Manufacturer: syz [ 518.735498][ T3695] usb 1-1: SerialNumber: syz [ 518.744582][ T3695] usb 1-1: config 0 descriptor?? [ 519.455199][ T3695] usb 1-1: USB disconnect, device number 5 16:51:30 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16:51:30 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000003b00)={0x11, 0x0, r1}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:30 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x5c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "04002881aedfaadc"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xff}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "02c6de725de871a6"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@nl=@kern={0x10, 0x0, 0x0, 0x40000}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="0972fb0090ecf10c73131520b4ca79955b315a63f7b0d4eab60f00fb9176a9a4b01c809095e2b228347e620c74ee08237eb66187cbba9de477b4e75c8380e433060fe69a33d72a838d1172db98d6737051a931d9d92805845a79df6ff0ab6087f8ff22570f5f653884a5bec9ba380fcb5ee8ca681ca25ba375", @ANYRES16=r5, @ANYRESDEC=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x252}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000804}, 0x4008084) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x1, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x30000000}, 0x80) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x1b, 0x2, 0x200, &(0x7f0000000440)="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"}) ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000000080)=""/77) 16:51:30 executing program 1: add_key(&(0x7f0000000680)='keyring\x00', 0x0, &(0x7f00000008c0), 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000340)="69bdbce14616487ea2d692203d222df13af63e2d23643a4f18e09643426e5e4cf045a2035b4cf42778b0b2526fb192da557fc4e9e87d1634e7b980a6ad943902c7ad08c4767942909572fb092d957d855eaa5a560334b37ab05b34764ed166ae845e01f3d4f0e62ef10aadb96c663396ed4fafe0bc1d77a8e7b2f597feeb4d34e48ac5192de1712a5cf26c006204977be9411631c3fbcaaf7cf81a242270f7d89c963fbb5568372c068e0d37f043207f5d638a7ee537ed18ff35078dde1b8e199b95f7cf46fa6611e34412ad94ce4c1376c2be3f81dc7b338e6493abbd6572fc2c019ebe8cfcca09d973662a236efe6cbb3b31f86e082e", 0xf7, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x40000000000017f, 0x0) 16:51:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000001180)=0x9e4af5516a307268) 16:51:31 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000003b00)={0x11, 0x0, r1}, 0x14) sendmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000000c0)="46cb25a6424cfa17bade7bee7a4e706c6634e9a780a38f92f0f7b03ec7737bb15c97ebc4fa89d88842ceab3b939da4e5502b9bc56e915da91d1804beae8c1bde11a328eb0291182f5761589d1e3b88319de15cf57927498e8bb8622d671520d830be707b668870b0", 0x68, 0x0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 16:51:31 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000003b00)={0x11, 0x0, r1}, 0x14) sendmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) [ 520.269337][ T3703] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 520.519312][ T3703] usb 1-1: Using ep0 maxpacket: 32 [ 520.799387][ T3703] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 520.808498][ T3703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.816791][ T3703] usb 1-1: Product: syz [ 520.821132][ T3703] usb 1-1: Manufacturer: syz [ 520.825754][ T3703] usb 1-1: SerialNumber: syz [ 520.831815][ T3703] usb 1-1: config 0 descriptor?? [ 521.543233][ T3703] usb 1-1: USB disconnect, device number 6 16:51:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000003b00)={0x11, 0x0, r1}, 0x14) sendmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:33 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, 0x0, &(0x7f0000000180)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x5c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "04002881aedfaadc"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xff}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "02c6de725de871a6"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@nl=@kern={0x10, 0x0, 0x0, 0x40000}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="0972fb0090ecf10c73131520b4ca79955b315a63f7b0d4eab60f00fb9176a9a4b01c809095e2b228347e620c74ee08237eb66187cbba9de477b4e75c8380e433060fe69a33d72a838d1172db98d6737051a931d9d92805845a79df6ff0ab6087f8ff22570f5f653884a5bec9ba380fcb5ee8ca681ca25ba375", @ANYRES16=r5, @ANYRESDEC=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x252}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000804}, 0x4008084) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x1, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x30000000}, 0x80) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x1b, 0x2, 0x200, &(0x7f0000000440)="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"}) ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000000080)=""/77) 16:51:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 16:51:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f00000000c0)=0x54) 16:51:33 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 16:51:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@private, @remote}, &(0x7f00000000c0)=0x8) 16:51:33 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, 0x0, &(0x7f0000000180)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:33 executing program 1: syz_clone(0x9c004000, 0x0, 0x0, 0x0, 0x0, 0x0) 16:51:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/211, &(0x7f0000000100)=0xd3) 16:51:33 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, 0x0, &(0x7f0000000180)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 16:51:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000001180)=0x4) 16:51:33 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 522.379458][ T3703] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 522.629401][ T3703] usb 1-1: Using ep0 maxpacket: 32 [ 522.939540][ T3703] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 522.948610][ T3703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.956852][ T3703] usb 1-1: Product: syz [ 522.961162][ T3703] usb 1-1: Manufacturer: syz [ 522.965775][ T3703] usb 1-1: SerialNumber: syz [ 522.972311][ T3703] usb 1-1: config 0 descriptor?? [ 523.513382][ T3703] usb 1-1: USB disconnect, device number 7 16:51:34 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 16:51:34 executing program 2: r0 = getpid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x40, 0x4, @tid=r0}, &(0x7f0000000080)) 16:51:34 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000003b00)={0x11, 0x0, r1}, 0x14) sendmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:34 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:34 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) 16:51:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r0, 0x2) 16:51:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:51:34 executing program 2: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = inotify_init() r2 = epoll_create(0x2) io_submit(r0, 0x2, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xb9968a5608c1dfc1, 0x0, r2, 0x0}]) 16:51:35 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:35 executing program 3: r0 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) 16:51:35 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000003b00)={0x11, 0x0, r1}, 0x14) sendmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:35 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 524.289321][ T3692] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 524.531770][ T3692] usb 1-1: Using ep0 maxpacket: 32 [ 524.819373][ T3692] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 524.828424][ T3692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.836542][ T3692] usb 1-1: Product: syz [ 524.840735][ T3692] usb 1-1: Manufacturer: syz [ 524.845316][ T3692] usb 1-1: SerialNumber: syz [ 524.851756][ T3692] usb 1-1: config 0 descriptor?? [ 525.375317][ T3692] usb 1-1: USB disconnect, device number 8 [ 525.385391][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:51:36 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:36 executing program 3: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000080)=""/10) 16:51:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 16:51:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 16:51:36 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000003b00)={0x11, 0x0, r1}, 0x14) sendmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:36 executing program 2: semop(0x0, &(0x7f0000000000)=[{}], 0x2aaaa9c1) 16:51:36 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 16:51:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f00000002c0)={@local}, &(0x7f0000000300)=0x14) 16:51:36 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000000)=[{0x7}], 0x1) 16:51:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 16:51:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f0000003b00), 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:36 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000022c0), 0xffffffffffffffdd) 16:51:36 executing program 2: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f0000000100)) 16:51:36 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:51:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f0000003b00), 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:36 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) 16:51:36 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x6411a405ecd9bdc2, 0x0) [ 526.139303][ T3692] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 526.379339][ T3692] usb 1-1: Using ep0 maxpacket: 32 [ 526.679445][ T3692] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 526.688501][ T3692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.696686][ T3692] usb 1-1: Product: syz [ 526.701002][ T3692] usb 1-1: Manufacturer: syz [ 526.705609][ T3692] usb 1-1: SerialNumber: syz [ 526.712608][ T3692] usb 1-1: config 0 descriptor?? [ 527.236638][ T3692] usb 1-1: USB disconnect, device number 9 [ 527.245366][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:51:38 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000022c0), 0x4) 16:51:38 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f0000003b00), 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 16:51:38 executing program 2: r0 = inotify_init1(0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) 16:51:38 executing program 3: capset(&(0x7f0000002040)={0x19980330}, &(0x7f0000002080)) 16:51:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 16:51:38 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000240)) 16:51:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:38 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 527.748974][ T9019] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 527.969336][ T3706] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 528.219342][ T3706] usb 1-1: Using ep0 maxpacket: 32 [ 528.499367][ T3706] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 528.508435][ T3706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.516469][ T3706] usb 1-1: Product: syz [ 528.520804][ T3706] usb 1-1: Manufacturer: syz [ 528.525409][ T3706] usb 1-1: SerialNumber: syz [ 528.533156][ T3706] usb 1-1: config 0 descriptor?? [ 529.056521][ T3706] usb 1-1: USB disconnect, device number 10 [ 529.069313][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:51:40 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 16:51:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:40 executing program 2: mq_open(&(0x7f0000000080)='[\x00', 0x1, 0x0, 0x0) 16:51:40 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:40 executing program 3: waitid(0xbfb6379d1a308f9b, 0x0, 0x0, 0x2, 0x0) 16:51:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 16:51:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:40 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0xffffffffffffffa5) 16:51:40 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 16:51:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x45, 0x0, &(0x7f0000000140)) [ 529.819273][ T3703] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 530.059285][ T3703] usb 1-1: Using ep0 maxpacket: 32 [ 530.339451][ T3703] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 530.348533][ T3703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.357726][ T3703] usb 1-1: Product: syz [ 530.362079][ T3703] usb 1-1: Manufacturer: syz [ 530.366672][ T3703] usb 1-1: SerialNumber: syz [ 530.373912][ T3703] usb 1-1: config 0 descriptor?? [ 530.893738][ T3703] usb 1-1: USB disconnect, device number 11 16:51:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f00000000c0), 0x0, 0x8000000000000001}]) 16:51:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bind$packet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:42 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:42 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0xade5fd02ff4a7c82) 16:51:42 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$GETVAL(r0, 0x3, 0xc, 0x0) 16:51:42 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bind$packet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:42 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 16:51:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback}, &(0x7f0000000040)=0xc) 16:51:42 executing program 3: getrusage(0x0, &(0x7f00000003c0)) 16:51:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bind$packet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f0000000000)=@un=@file={0x1, './file0\x00'}, 0x64) 16:51:42 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000022c0), 0x4) 16:51:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bind$packet(r1, &(0x7f0000003b00), 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:42 executing program 3: syz_clone(0x3f2a1300, 0x0, 0xfffffffffffffdc9, 0x0, 0x0, 0x0) [ 531.669277][ T7253] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 531.909291][ T7253] usb 1-1: Using ep0 maxpacket: 32 [ 532.189415][ T7253] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 532.198481][ T7253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.207325][ T7253] usb 1-1: Product: syz [ 532.211725][ T7253] usb 1-1: Manufacturer: syz [ 532.216343][ T7253] usb 1-1: SerialNumber: syz [ 532.222974][ T7253] usb 1-1: config 0 descriptor?? [ 532.743458][ T7253] usb 1-1: USB disconnect, device number 12 [ 532.759942][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:51:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'lo\x00'}) 16:51:44 executing program 2: r0 = msgget(0x1, 0x3a9) msgctl$IPC_RMID(r0, 0x0) 16:51:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bind$packet(r1, &(0x7f0000003b00), 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:44 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xffff, 0x4) 16:51:44 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:51:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bind$packet(r1, &(0x7f0000003b00), 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:44 executing program 2: socketpair(0x0, 0x40000, 0x0, 0x0) 16:51:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @multicast2}, 0xc) 16:51:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @remote}, 0x8) 16:51:44 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:44 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, 0x0) 16:51:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000080)) 16:51:44 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000022c0)=0x2, 0x4) 16:51:44 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000340), 0x4) 16:51:44 executing program 1: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 16:51:44 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:44 executing program 3: capset(&(0x7f0000006a40)={0x19980330}, 0x0) 16:51:44 executing program 1: getcwd(&(0x7f0000000000)=""/150, 0x96) 16:51:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@local, @empty}, 0xc) 16:51:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x2}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @multicast1}, 0x8) 16:51:44 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:44 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000200)={0x9}, 0x0, 0x0, 0x0) 16:51:45 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @empty}, 0x8) 16:51:45 executing program 1: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/213) r0 = semget(0x1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 16:51:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, 0x0, 0x0, 0x0) 16:51:45 executing program 2: timer_create(0x0, &(0x7f00000010c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000001100)) timer_delete(0x0) 16:51:45 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, 0x0, 0x0, 0x0) 16:51:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000025c0), 0x4) 16:51:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000002180), 0x4) 16:51:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_vlan\x00', 0x8000}) 16:51:45 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:45 executing program 1: socketpair(0x2, 0x3, 0x5, &(0x7f0000000040)) 16:51:45 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, 0x0, 0x0, 0x0) 16:51:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x512}) ioctl$TUNSETDEBUG(r0, 0x400454e2, 0x0) 16:51:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x801c581f, 0x0) 16:51:45 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 16:51:45 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) select(0x40, &(0x7f0000000200)={0x9}, 0x0, 0x0, 0x0) 16:51:45 executing program 1: r0 = msgget(0x0, 0x0) msgsnd(r0, &(0x7f0000000680)={0x0, "54512a955eeaa3ea44851185153efddcb5177f9fb404a0f8938cc55ddb32b57bc82be8379a88c76846b8b20f942eeef20daafa5ed5d03778dbceb3c575b01b53f887956014401a2573a5405a514caefba4add8774798a3f2318ccd96233c1d90808eee2c5118b6b4db6a13bea40fea7aa0ca8f8d3448bfbc60922c496856ea63ffce2402590cff1797c64b58f424aad3ac341b11da8ec795996d92fc78c8d947cbc3533b0ba28d0b3c842fa3177fd8200e80325646554519329a1d0bd875fb5fc869c52eb1f57392a854776f51089247e1ffea5bc54f7ce44c9242e7b349b028d0fc09ee8decfb86982144b4ebb4ed8c2b7b12b5cc2e4ac427bc145d68fd2585184911fa8e41e93bc4b7cabb2d32c0acff04abd71019ab904f9ca886c5bbb38cdfcbc2c26f81a1342298c18b7cef2109a1a56c1ceaa53baeb7c3c71f814b1e1bb92c405c536ffbea80dcd3051d549f42126937c8a4483bdf800fdd2f09059fef38ef5272a7e4d3b160a86049554799ec98164815feb7ae2ce1fe384bc2ee01d9f8f593a2601feb6d13bc7e6bcfe6b72aa627109131651324060e096733f35254a632ebbcddf81796d738d82c655a99df7fee1dacec6ea66bb302851c23236ef5b6d8a1d88309b96955681f5726cb468f08c71d2f72b4aa720c3ed96448e0f3e139c4a4c78ba62c5aaf50a820e77de705f09566b2384e39be1b98e09ab0df03c4c0385e47caf4bfce2648feb83e167cd2036687085344c9ff1abed3c4528f8f064a74ebc8119091ae84f5f4b0b4fe3787b489a5c57780ac5bc3470991def231d2059a7834d66b03195ea7c42945d9b01d8176f2448e2e0109b676c9922b699af3933dff95b2473380659294f36d07e25407b78f067647dc673d25053c7c0bc36217804ee39ec61ff4e4930dcc7ab1e10e84f35469739898c63cc782f31cea39b0b13c8824d24c8a87ca46695ab3e1eff6027eaa325481eb4922a5cffc6983eb1a6e6e1b6ec5a32281d5c7c02a2c0e9e0fc04566d62143c61afb82b288ad112f465d2dc9773c71cc42385796cd89f3b3a01554d57e55523cc6c7424d20e8c1c4b3c944d17254c55a76434b3cf71a89001144f28fa49c0f0ef1694354d72e3a75443bc99439fdc7d77153922e24cce4d6700535cfb0178d74dd41c6dca7f965270784bd7732b27307457c07fcf445cc7e5c4d1850456220302bd672052d276a5ec86793718085786ac6c18031f7c5ec1699f83f140faf5dd8821c0d185aae2194c120c97afe87187cff00feb1812b9d146508839c3888da75d7b7acb28f1898cc9b3ac54fa8d96f8218a30fcc9f47bc2d4c1ae9042c6c0d2c0b96a875736053d128e654f0511628324bf183ee2544036f8331b683192573cf03800d1283182de7960554e8c6f60cb0dad67aee816f653cd56e6dbffbdd4f96d25142becac1db4859d20010b3776de813ffa06fb37b82a044a1e6f0bde0fb300d78c9685f1a897eb6eae5cb12ae5678635a899a7aa274c97e0c59f906eda839e3b02cf77704bfc50f35a9fc5a5744e8242ee9e7c425e16a189cea70af81eb3223de5da1add349903e94ac5f1a3a21ee5773d52b4443a33c622eee9bc5c54f7785859445848654f2610ee30726a0400c5d7811bdcd59e5a8484bc58ff17f34743f47099090745d701aff81b872a48cf3d37f7cd6f868c8b64e122c09ded7da79388e6ca2f809e2afc18a197fb674a08e929d2b9ce37a43a7d8df765a6799f3907071f6bf6b30076587037f9a22df4567b4968eda8c34fa3c6b8a5abd5c5f8ed3eca1596d0b6ca815ed11f691914867d76119bb9d72acb0d24bd77d33653462b60bb9cf9dd836669d0eb2bd54b560037d05d439f3946db8983efc51bbec56757074e60c12488bd2bb26acd5d13578baeb723b47fa806ab860db640a2852ad930bb0667c0ad085e994335c6d5dc574dc62756e1a54bc36d35ad4312351fc2a4812589ac8ac597eb8e8782cc327998c9cc0cb18b3b911685cc5f896dd931eb4141e4e2455b9b73281ed2d06c2f841658679f14743fed55cf2babd334fc61b93d4b7ca4684a9fd62c7901de283ad8e5742a13ab9c06367e51f7ba7009e292e144c22ab9fb6864a050e05c7a25a75e27f15f3906e2378eb08456c6d0ba0b822fc541d1f60491df22501957630da0397cbe1a676fc6ef8b5c799f52fd71623fe9f74726e098f2efec57dd9b89fc7cf4a8d67aea88fa7f4e1dba6eacfc536d67a293006fd13e7bc0cc2554f9e92e418b1f9064f47eed58e81adc7a829936bd1ae850f8d3cb5fa11bb5cb21133db74be9fbf96a60a50d52f8553252e36194d2b3dc0a5eada3ed67a6f45b48945bafd36ff52a2ac6ce135434fce4737f4d225ca1541c68070f80f2bbed12d6cfaa19338eb639d384d370b19df999d998a1776727a2d97a9574ee9f0d11eec314f6a9269013c822c2b9f71c8eda09f29bf0b7d4973ddcfc726cffe45e9bcd780898b07c5c96e21a99abc5d83df30ad57508d314cf416f4553a9affb3ec4979606befc4135caff0289d9c364186badb50a7a33ab8da72441a35e29f670297775b7f4956cc979e2d061099a572a8416d56b82ffa2f683d1dd7209f4f1224e9412eee4e5f58b6c091e49d8ced73f006fec1d9f95041773fccf3f1a05be0fa29c2b5b92025fd19165c70a6f8526cbd6c2efee9b00fd9f20276a25fd9eeae66ecf034e0f36e038c403dabbf13326be828def2869676e98c74c3169379f37ecf218a6de3caa45a43cf2c39bbb7f28f95763109d004cae5e67e6e4d9fc942dc9ec82ed0f6f8753be6568f0d1872a3a526a579c16273bb8f934a4fdac7f44bcb47a6891855833317d60f9e9adfda8910ad4681cf17671f267ade8d6fceef"}, 0x801, 0x0) 16:51:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}], 0x1, 0x0) 16:51:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x512}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 16:51:45 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x0, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x1}) 16:51:46 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 16:51:46 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x0, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}], 0x1, 0x0) 16:51:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) 16:51:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x4b47, 0x0) 16:51:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x512}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x0, 0x1, [@link_local]}) 16:51:46 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x0, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:46 executing program 2: socketpair(0xa, 0x2, 0x11, &(0x7f0000000040)) 16:51:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}], 0x1, 0x0) 16:51:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454e2, &(0x7f0000000040)=0x9) 16:51:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x1}) 16:51:46 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:46 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)) 16:51:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:51:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0x3e80) 16:51:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x1}) 16:51:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:51:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0xc0189436, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x400}) 16:51:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:51:47 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 16:51:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000018c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x80, 0x0, 0x4}, 0x0) 16:51:47 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x0, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:51:47 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x1}) 16:51:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x4004743d, 0x20000000) 16:51:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x5451, 0x0) 16:51:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 16:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}], 0x10}}], 0x2, 0x0) 16:51:47 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454e2, &(0x7f0000000040)) 16:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}], 0x10}}], 0x2, 0x0) 16:51:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0x0) [ 536.799319][ T3692] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 536.989358][ T3692] usb 1-1: device descriptor read/64, error 18 [ 537.259283][ T3692] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 537.449342][ T3692] usb 1-1: device descriptor read/64, error 18 [ 537.570126][ T3692] usb usb1-port1: attempt power cycle [ 537.989288][ T3692] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 538.079388][ T3692] usb 1-1: Invalid ep0 maxpacket: 0 [ 538.229646][ T3692] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 538.331071][ T3692] usb 1-1: Invalid ep0 maxpacket: 0 [ 538.336390][ T3692] usb usb1-port1: unable to enumerate USB device 16:51:50 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x0, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}], 0x10}}], 0x2, 0x0) 16:51:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x1}) 16:51:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x512}) 16:51:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/94, 0x5e}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="baaefe3ae7015fe36efff593735b99ba908d7551f0ad237c8c292783c5badf27fda96bc6a85ec0e7d941d41a44a48917381c9f64421c843152ad19335fd65805906cffb86cfd85183abc0d73521329a2fae7f63334f545a13688c97e6ead", 0x5e}], 0x1}, 0x0) 16:51:50 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x512}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) 16:51:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}], 0x10}}], 0x2, 0x0) 16:51:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}], 0x10}}], 0x2, 0x0) 16:51:50 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$TUNGETVNETBE(r0, 0xb702, 0x0) 16:51:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="99aaffa35d19b2e65beb4c3a73f3720d09bf90b0cd80d62915830c5d0348396ce35990ddd5cc478ebf7e609774bc9afea0d10e9d837ad423f8bf82feca7a4a9b44717d859b948d0be71db146954d5fb35da027879221fdb0e0a620c22f950afe3fc8284f94397e97db128ec6484bbc03c181831fb80c8e18bf4ff3a7263faffc87cb4d322bf435838d29645e09064e2e7710782def9c6e87214e1bf18d855d44592b28a9dc4dd1234cff1752fd7791a8a33bbac022623a367a605dabe8684c72f9ad41107c390859d84971883dee915bc42b06cd9e07da1ff76a2bf6bcb2c0cc4582387ec882f97910ca0637958fc44a6fa830edb4cd", 0xf6}], 0x1, &(0x7f00000004c0)=[{0x100, 0x0, 0x0, "8018f4d31625b72c488d7d9e4919198e8c0405baed43ec86de885ae5b6d76eb82dabda16043ce24becc690aca97d46c69a08576f5a69fbeb87658f15e02199bd7aa3d9ca65d96e9bcb7c922ca82a44d58d8fcaddbfef4d014d20770dba21d3d090b1ce3d4ddcf61614824b2dd7fe3d23434b30fe574adb2cd0a01f486f0eb1eea5727a81c0caae839481736f979843bae5840785312de2c64b643557f729225180ed28b9c132d828a31b3e81fe97f34ce9ac77e81a1829e03c7439f8dfa2582057d102ba502c4ad3a6de63160c0f820ebf7d96aa093a12618c709aa907bd982cbd2f79c56e750fea8d18"}, {0x10, 0x0, 0x0, "4547d9b0e458a1491e3ee5397ccca2ac30d6bb7dee5e900a081b5b999d092195bdc4e2b207ed8bc310deb152ca9c923785bbce6442179cdaf82181773d1a9ed28993432e92bcb2d6023421d412e15d7f8f6b9af6041c48b561a96830a53796f391cd1ad716e15fc559c19fb50f30cacf155088e14c41b1bc6c674f93c09924a1a5c538d6e76ecb885ec6aca7c1f83bbd22c13bbabc6e8a"}, {0x100, 0x0, 0x0, "e51ed94574167aca58267c572b4b81f37eeea3fc77ba1be161a74d99505818b761640e775aabed5dc48b8daa4b0eb38d23082db28975d460fa2608d6673e04f41ca089b495a8421255b21e667068e6c83f6bc358485d1e71ffcc5a572fa5151f44e41036fbbb63046a05d23066c1af337534b8d4c29fc2a1b38e417831973eae84996e1542514ce553f8f74bf2952f0e34b6e8b7b52fb8727038dd89c6532ae732a642b139aa3c8875409385167ab2839d1187f752d0e9531a5cbbb810308e1af91093bfbed6ab73a08d3b1de8411d4f721f469e7a7f4dad4e0fcc0eb30915c8567911126d4fde295b99234143"}, {0x38, 0x0, 0x0, "90155f999c6be3794cfbbed82fea42a46ecb45a834f19956cea6f1acf104c40921f097d578de"}, {0x90, 0x0, 0x0, "eb67f67c1061d145a7fed29598a8c7deeb4ae8d20477365d6971d950ff898c275e71b7b17aa3f8c5177edac02ef506edfabeff90601ea9f64478741c3092cea7aeee5db51c5aace3be4cbf2f2d66e659c11dc69f76e8fa2efcf82d31e58da5fa3742538ce8dac72b6251b7d4e5a7bbd3c921b7fbd4c82eb026"}], 0xd6d4c2a8def12d95}, 0x4008c00) 16:51:50 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') [ 540.019293][ T3706] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 540.219279][ T3706] usb 1-1: device descriptor read/64, error 18 [ 540.489350][ T3706] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 540.689293][ T3706] usb 1-1: device descriptor read/64, error 18 [ 540.810825][ T3706] usb usb1-port1: attempt power cycle [ 541.229264][ T3706] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 541.319474][ T3706] usb 1-1: Invalid ep0 maxpacket: 0 [ 541.469285][ T3706] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 541.569457][ T3706] usb 1-1: Invalid ep0 maxpacket: 0 [ 541.574805][ T3706] usb usb1-port1: unable to enumerate USB device 16:51:53 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x0, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf879", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}], 0x10}}], 0x2, 0x0) 16:51:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 16:51:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x8924, 0x0) 16:51:53 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$TUNGETVNETBE(r0, 0xb704, 0x0) 16:51:53 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x40086602, &(0x7f0000000040)) 16:51:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x5452, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 16:51:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454d8, &(0x7f0000000000)) 16:51:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 16:51:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@broadcast]}) 16:51:53 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f00000014c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x1000000}]}}, &(0x7f0000001540)=""/4096, 0x7ffff, 0x1000, 0x1}, 0x20) [ 543.049272][ T3706] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 543.239348][ T3706] usb 1-1: device descriptor read/64, error 18 [ 543.509268][ T3706] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 543.699885][ T3706] usb 1-1: device descriptor read/64, error 18 [ 543.820114][ T3706] usb usb1-port1: attempt power cycle [ 544.229337][ T3706] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 544.319459][ T3706] usb 1-1: Invalid ep0 maxpacket: 0 [ 544.469847][ T3706] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 544.560376][ T3706] usb 1-1: Invalid ep0 maxpacket: 0 [ 544.565692][ T3706] usb usb1-port1: unable to enumerate USB device 16:51:56 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 16:51:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 16:51:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000002c0)) 16:51:56 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$TUNGETVNETBE(r0, 0xb701, 0x0) 16:51:56 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x57, 0x6}]}}, &(0x7f00000000c0)=""/160, 0x2a, 0xa0, 0x1}, 0x20) 16:51:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454ce, 0x0) 16:51:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d0, &(0x7f0000000040)) 16:51:56 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 16:51:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x8927, &(0x7f0000000040)) [ 546.089296][ T3706] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 546.329279][ T3706] usb 1-1: Using ep0 maxpacket: 32 [ 546.609331][ T3706] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 546.618397][ T3706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.626950][ T3706] usb 1-1: Product: syz [ 546.631234][ T3706] usb 1-1: Manufacturer: syz [ 546.635831][ T3706] usb 1-1: SerialNumber: syz [ 546.644809][ T3706] usb 1-1: config 0 descriptor?? [ 547.184511][ T3706] usb 1-1: USB disconnect, device number 25 16:51:58 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:51:58 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:51:58 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0xa, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:51:58 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000001680)) 16:51:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:58 executing program 1: socket(0x2, 0x3, 0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 16:51:58 executing program 2: pipe(&(0x7f0000000540)) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 16:51:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'team0\x00', {'bond_slave_0\x00'}}) 16:51:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:51:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x48) 16:51:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:51:58 executing program 1: pipe(&(0x7f0000000180)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 547.929344][ T3692] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 548.169290][ T3692] usb 1-1: Using ep0 maxpacket: 32 [ 548.469415][ T3692] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 548.478532][ T3692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.486686][ T3692] usb 1-1: Product: syz [ 548.490960][ T3692] usb 1-1: Manufacturer: syz [ 548.495576][ T3692] usb 1-1: SerialNumber: syz [ 548.504128][ T3692] usb 1-1: config 0 descriptor?? [ 549.033954][ T3692] usb 1-1: USB disconnect, device number 26 16:52:00 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:00 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:00 executing program 1: pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 16:52:00 executing program 3: bpf$MAP_CREATE(0x4, &(0x7f0000001600)=@bloom_filter, 0x48) 16:52:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:00 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 16:52:00 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) 16:52:00 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)) 16:52:00 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:00 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6fff, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000020400000000000000f800000000c0ed000000000000000080008000ff0f000000000000100000000003000000000000400000002000000088c3c373e3f92313000000000e1fbe717cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e20506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00"/220, 0xdc}, {&(0x7f00000100e0)="00000000000000000007000000000000f000000000000000000000000055aa", 0x1f, 0x1e0}, {&(0x7f0000010100)="ffff0007000000003f00"/32, 0x20, 0x2000}, {&(0x7f0000010120)="46494c4530000300000000000000000001000100380001009801000000040000000000000000000004000000000000000800000000000000100000006000000000001800000000004800000018000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000300000006800000000001800000002004a00000018000100050000000000050000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d801006c000000000000006c0000000000000600000000000000040324004d00460054000000000000008000000048000000010040000000010000000000000000004a000000000000004000000000000000002c01000000000000180100000000000018010000000000114b100000000000b00000004800000001004000000003000000000000000000000000000000000040000000000000000004000000000000100000000000000010000000000000001101080000000000ffffffff00"/416, 0x1a0, 0x4000}, {&(0x7f00000102c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x20, 0x41e0}, {&(0x7f0000000640)="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", 0x1c3, 0x43e0}, {&(0x7f0000000040)="0000000000000000000000000000000000000000000000000000000000000200", 0x20, 0x45e0}, {&(0x7f0000000a40)="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"/384, 0x180, 0x47e0}, {&(0x7f0000010600)="0000000000000000000000000000000000000000000000000000000000000200", 0x20, 0x49e0}, {&(0x7f0000010620)="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", 0x220, 0x4be0}, {&(0x7f0000000840)="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", 0x1e0, 0x4fe0}, {&(0x7f0000010a20)="0000000000000000000000000000000000000000000000000000000000000200", 0x20, 0x51e0}, {&(0x7f0000010a40)="000000000000000000000000000000000000000000000000000000000000020046494c453000030000000000000000000500010038000300000200000004000000000000000000000600000005000000070000000000000010000000480000000000180000000000300000001800000000ab884a9fc6d8019ea2ff4a9fc6d8019ea2ff4a9fc6d80100ab884a9fc6d80126200000000000000000000000000000300000006000000000001800000001004400000018000100050000000000050000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100000000000000000000000000000000060000100000000001032e00000000005000000048000000010040000000020000000000000000000400000000000000400000000000000000140000000000002c100000000000002c1000000000000021050f010000000090000000580000000004180000000300380000002000000024004900330030003000000001000000001000000400000010000000280000002800000001000000000000000000000018000000030000000000000000000000a000000050000000010440000000050000000000000000000300000000000000480000000000000000100000000000000010000000000000001000000000000024004900330030002104140100000000b0000000280000000004180000000400080000002000000024004900330030000100000000000000ffffffff00000700", 0x220, 0x53e0}, {&(0x7f0000010c60)="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"/384, 0x180, 0x57e0}, {&(0x7f0000010de0)="0000000000000000000000000000000000000000000000000000000000000200", 0x20, 0x59e0}, {&(0x7f0000010e00)="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"/480, 0x1e0, 0x5be0}, {&(0x7f0000000440)="000000000000000000000000000000000000000000000000000000000000020046494c453000030000000000000000000800010038000100780100000004000000000000000000000400000008000000020000000000000010000000600000000000180000000000480000001800000000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80106000000000000000000000000000000000000000001000000000000000000000000000000000000300000007000000000001800000003005200000018000100050000000000050000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d8010000000000000000000000000000000006000000000000000803240042006100640043006c0075007300ffff00000000800000001800000000001800000002000000000018000000800000005000000001044000000001000000000000000000fe07000000000000480000000000000000fc1f000000000000fc1f00000000000000000000000000240042006100640002ff070000000000ffffffff00"/416, 0x1a0, 0x5fe0}, {&(0x7f00000111a0)="0000000000000000000000000000000000000000000000000000000000000200", 0x20, 0x61e0}, {&(0x7f00000111c0)="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"/736, 0x2e0, 0x63e0}, {&(0x7f00000114a0)="000000000000000000000000000000000000000000000000000000000000020046494c453000030000000000000000000a0001003800010098010000000400000000000000000000040000000a000000020000000000000010000000600000000000180000000000480000001800000000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80106000000000000000000000000000000000000000001000000000000000000000000000000000000300000006800000000001800000003005000000018000100050000000000050000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d801000002000000000000000200000000000600000000000000070324005500700043006100730065008000000048000000010040000000010000000000000000007f0000000000000040000000000000000000020000000000000002000000000000000200000000002280001d02000000800000004800000000051800000002002000000028000000240049006e0066006f0000000000000020000000000000000c691b6b777edcda00000000000000000000000000000000ffffffff00"/448, 0x1c0, 0x67e0}, {&(0x7f0000000600)="0000000000000000000000000000000000000000000000000000000000000200", 0x20, 0x69dc}, {&(0x7f0000011680)="000000000000000000000000000000000000000000000000000000000000020046494c453000030000000000000000000b0001003800030080020000000400000000000000000000030000000b000000020000000000000010000000600000000000180000000000480000001800000000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80106000000000000000000000000000000000000000101000000000000000000000000000000000000300000006800000000001800000001005000000018000100050000000000050000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d8010000000000000000000000000000000006000010000000000703240045007800740065006e00640090000000780100000004180000000200580100002000000024004900330030003000000001000000001000000400000010000000480100004801000000000000190000000000010060004e00000000000b00000000000b0000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d801000000000000000000000000000000002600002000000000060324004f0062006a00490064000000180000000000010060004e00000000000b00000000000b0000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100000000000000000000000000000000260000200000000006032400510075006f007400610002001a0000000000010068005200000000000b00000000000b0000ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100ab884a9fc6d80100000000000000000000000000000000260000200000000008032400520065007000610072007300650000000000000000000000000000001000000002000000ffffffff00000000", 0x2a0, 0x6be0}, {&(0x7f0000011920)="00000000000000000000000000000000000000000000000000000000000002", 0x1f, 0x6fe0}], 0x0, &(0x7f00000767a0), 0x1) 16:52:00 executing program 1: unlinkat(0xffffffffffffff9c, &(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) [ 549.571030][ T9388] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 0 (only 8 groups) [ 549.598576][ T9393] loop3: detected capacity change from 0 to 55 [ 549.634071][ T9393] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 549.656027][ T9393] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 549.665514][ T9393] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 549.678663][ T9393] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 549.759314][ T3706] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 549.999345][ T3706] usb 1-1: Using ep0 maxpacket: 32 [ 550.289463][ T3706] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 550.298545][ T3706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.306585][ T3706] usb 1-1: Product: syz [ 550.310782][ T3706] usb 1-1: Manufacturer: syz [ 550.315370][ T3706] usb 1-1: SerialNumber: syz [ 550.321800][ T3706] usb 1-1: config 0 descriptor?? [ 550.845634][ T3706] usb 1-1: USB disconnect, device number 27 16:52:02 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:02 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000002680)='./file0\x00', 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 16:52:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:02 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:02 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)) 16:52:02 executing program 3: mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x27, &(0x7f0000000780)={[{@stats}]}) 16:52:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:02 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:02 executing program 3: unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) [ 551.311356][ T9401] binder: Binderfs stats mode cannot be changed during a remount [ 551.320716][ T9402] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 0 (only 8 groups) 16:52:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:02 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) [ 551.619312][ T3706] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 551.859275][ T3706] usb 1-1: Using ep0 maxpacket: 32 [ 552.144221][ T3706] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 552.153349][ T3706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.161838][ T3706] usb 1-1: Product: syz [ 552.165994][ T3706] usb 1-1: Manufacturer: syz [ 552.171078][ T3706] usb 1-1: SerialNumber: syz [ 552.177757][ T3706] usb 1-1: config 0 descriptor?? [ 552.745220][ T3706] usb 1-1: USB disconnect, device number 28 16:52:04 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_STATFS(r0, 0x0, 0xfffffffffffffcc1) 16:52:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:04 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000440)) 16:52:04 executing program 1: mknod$loop(&(0x7f0000000340)='./file0\x00', 0x0, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x80, &(0x7f0000000480)) 16:52:04 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:04 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x16e) 16:52:04 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940), 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x0, 0x0, 0x1) 16:52:04 executing program 1: sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x100}, 0x10}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) 16:52:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:04 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x0, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:04 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000003740)=0x40) 16:52:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:04 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x0, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x6c060000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) [ 553.539276][ T2937] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 553.559357][ T3703] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 553.699339][ T3706] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 553.781387][ T2937] usb 1-1: Using ep0 maxpacket: 32 [ 553.799328][ T3703] usb 2-1: Using ep0 maxpacket: 8 [ 553.919477][ T3703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.930030][ T3703] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 553.938945][ T3703] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 553.948010][ T3703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.956059][ T3706] usb 4-1: Using ep0 maxpacket: 8 [ 554.001256][ T3703] hub 2-1:1.0: bad descriptor, ignoring hub [ 554.007265][ T3703] hub: probe of 2-1:1.0 failed with error -5 [ 554.014710][ T3703] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 554.020842][ T3703] cdc_wdm 2-1:1.0: Unknown control protocol [ 554.069501][ T2937] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 554.078572][ T2937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.079327][ T3706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.087169][ T2937] usb 1-1: Product: syz [ 554.098958][ T3706] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 554.101207][ T2937] usb 1-1: Manufacturer: syz [ 554.114614][ T2937] usb 1-1: SerialNumber: syz [ 554.116560][ T3706] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.126013][ T2937] usb 1-1: config 0 descriptor?? [ 554.129069][ T3706] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 554.143102][ T3706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.189966][ T3706] hub 4-1:1.0: bad descriptor, ignoring hub [ 554.196021][ T3706] hub: probe of 4-1:1.0 failed with error -5 [ 554.208528][ T3706] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 554.329836][ T3696] usb 2-1: USB disconnect, device number 24 [ 554.392973][ T9454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.401488][ T9454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.529647][ T3696] usb 4-1: USB disconnect, device number 2 [ 554.703262][ T2937] usb 1-1: USB disconnect, device number 29 16:52:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:06 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x0, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)="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", 0x209}], 0x1) 16:52:06 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:06 executing program 3: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @broadcast}, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x10}], 0x2, &(0x7f0000000240), &(0x7f0000000280)={[0x77e2]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/75) mlock2(&(0x7f00003d9000/0x3000)=nil, 0x3000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x420f, r2, 0x2, &(0x7f0000000140)={0x0}) sched_getattr(0x0, &(0x7f00000002c0)={0x38}, 0x38, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\b\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000008e93b0d8d13991319810df5f50b8403e80803515dec9f8d3e47e4e454ae90ccbda0dd5093d82b7f682090f845b4e451d7011b6a6569d69295e7ae973fd69bd8cdb90399c1e37b9d14458a838a2eb4a6252f85129e043ce8fd55390e954d5858e7cf7f56e0e4f2624011076422dbca502fb122aa10680a3c2b3b7e9037fb03fd1ee2f4246b324a38e7b943a9f10b61c9c8feaae5f809ddb75ab76c41e8073b85f0ead677be94e04b793a52a96d12362c84dd9b8daad42edc5dd0dd5cfcef46c7543f6ac39de441007", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="0000000030000000000000ea0000000001000000133e9773cd6098c431cbc57c7a800a7c6030747153bf0e3e70d97e1d31280053d8ae16615754f944e02d6efae32d00ea6530cafd49ab8d1b426e1389eff64c4e4c4b5b03be67c1041a36803ef39badf5163828211f616d5a010b91db18b82c814a18727c08aeeddedb0d369a2379fb646cc348cbb65c8f2113a143acdb6adb54b6d05a1c11672e1ad69a7a51413d30363959c32f9089837b8c55fc9dabf6cbaf448a3ee0817cd6bee7e7f6a72d8d750ffe0da41344637955e395345d7ac7b29fbf54dc0c4d160ec4e84448140b18aa6d3c54b5ab9cce", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="30c7e9cb6cee1036a547772780bbd894", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="38000000200000002300000001000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xd8, 0x45}, 0x0) move_pages(r3, 0x7, &(0x7f0000000040)=[&(0x7f0000ba2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fb4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00001c2000/0x2000)=nil], 0x0, &(0x7f0000000080), 0x2) 16:52:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca9", 0x7}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:06 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000140)=@string={0x2}}]}) 16:52:06 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x0, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca9", 0x7}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:06 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x0, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:06 executing program 3: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @broadcast}, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x10}], 0x2, &(0x7f0000000240), &(0x7f0000000280)={[0x77e2]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/75) mlock2(&(0x7f00003d9000/0x3000)=nil, 0x3000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x420f, r2, 0x2, &(0x7f0000000140)={0x0}) sched_getattr(0x0, &(0x7f00000002c0)={0x38}, 0x38, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\b\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000008e93b0d8d13991319810df5f50b8403e80803515dec9f8d3e47e4e454ae90ccbda0dd5093d82b7f682090f845b4e451d7011b6a6569d69295e7ae973fd69bd8cdb90399c1e37b9d14458a838a2eb4a6252f85129e043ce8fd55390e954d5858e7cf7f56e0e4f2624011076422dbca502fb122aa10680a3c2b3b7e9037fb03fd1ee2f4246b324a38e7b943a9f10b61c9c8feaae5f809ddb75ab76c41e8073b85f0ead677be94e04b793a52a96d12362c84dd9b8daad42edc5dd0dd5cfcef46c7543f6ac39de441007", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="0000000030000000000000ea0000000001000000133e9773cd6098c431cbc57c7a800a7c6030747153bf0e3e70d97e1d31280053d8ae16615754f944e02d6efae32d00ea6530cafd49ab8d1b426e1389eff64c4e4c4b5b03be67c1041a36803ef39badf5163828211f616d5a010b91db18b82c814a18727c08aeeddedb0d369a2379fb646cc348cbb65c8f2113a143acdb6adb54b6d05a1c11672e1ad69a7a51413d30363959c32f9089837b8c55fc9dabf6cbaf448a3ee0817cd6bee7e7f6a72d8d750ffe0da41344637955e395345d7ac7b29fbf54dc0c4d160ec4e84448140b18aa6d3c54b5ab9cce", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="30c7e9cb6cee1036a547772780bbd894", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="38000000200000002300000001000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xd8, 0x45}, 0x0) move_pages(r3, 0x7, &(0x7f0000000040)=[&(0x7f0000ba2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fb4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00001c2000/0x2000)=nil], 0x0, &(0x7f0000000080), 0x2) 16:52:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca9", 0x7}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:06 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x0, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7", 0xb}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) [ 555.459357][ T3695] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 555.539428][ T2937] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 555.709263][ T3695] usb 1-1: Using ep0 maxpacket: 32 [ 555.789290][ T2937] usb 2-1: Using ep0 maxpacket: 8 [ 555.909602][ T2937] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 555.959409][ T2937] usb 2-1: language id specifier not provided by device, defaulting to English [ 555.989327][ T3695] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 555.998415][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.006907][ T3695] usb 1-1: Product: syz [ 556.011198][ T3695] usb 1-1: Manufacturer: syz [ 556.015827][ T3695] usb 1-1: SerialNumber: syz [ 556.026331][ T3695] usb 1-1: config 0 descriptor?? [ 556.079434][ T2937] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 556.088478][ T2937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.096529][ T2937] usb 2-1: Product: syz [ 556.100739][ T2937] usb 2-1: Manufacturer: syz [ 556.105336][ T2937] usb 2-1: SerialNumber: syz [ 556.151232][ T2937] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 556.353213][ T3692] usb 2-1: USB disconnect, device number 25 [ 556.594160][ T3695] usb 1-1: USB disconnect, device number 30 16:52:08 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x0, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x40040) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, 0x0) 16:52:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7", 0xb}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}}}, 0x24}}, 0x0) 16:52:08 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7", 0xb}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 16:52:08 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x0, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf8", 0xd}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:08 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010100}}, 0x24) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x60, 0x7f, [{{0x9, 0x4, 0x0, 0x70, 0x1, 0x3, 0x1, 0x2, 0x6b, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x4d0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x3, 0xff}}]}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x17, &(0x7f0000000100)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xff, 0x0, 0x0, 0x4}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x0, 0x0}]}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)) 16:52:08 executing program 1: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000002180)=@ax25={{0x3, @bcast}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) 16:52:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:08 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x0, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf8", 0xd}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:08 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x0, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:08 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x0, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 557.339285][ T3695] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 557.469407][ T2937] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 557.579285][ T3695] usb 1-1: Using ep0 maxpacket: 32 [ 557.709309][ T2937] usb 4-1: Using ep0 maxpacket: 8 [ 557.829367][ T2937] usb 4-1: config 1 interface 0 altsetting 112 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.842766][ T2937] usb 4-1: config 1 interface 0 has no altsetting 0 [ 557.859371][ T3695] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 557.868451][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.876590][ T3695] usb 1-1: Product: syz [ 557.880780][ T3695] usb 1-1: Manufacturer: syz [ 557.885361][ T3695] usb 1-1: SerialNumber: syz [ 557.891317][ T3695] usb 1-1: config 0 descriptor?? [ 558.089353][ T2937] usb 4-1: string descriptor 0 read error: -22 [ 558.095622][ T2937] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 558.105052][ T2937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.453974][ T2937] usbhid 4-1:1.0: can't add hid device: -71 [ 558.460758][ T3695] usb 1-1: USB disconnect, device number 31 [ 558.466934][ T2937] usbhid: probe of 4-1:1.0 failed with error -71 [ 558.478538][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.501693][ T2937] usb 4-1: USB disconnect, device number 3 16:52:09 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000003b00)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a943f0aadcaca97a919de7abf8", 0xd}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 16:52:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:09 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x0, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:09 executing program 1: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000002180)=@ax25={{0x3, @bcast}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) 16:52:09 executing program 3: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000002180)=@ax25={{0x3, @bcast}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) 16:52:09 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x0, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:09 executing program 4: syz_clone(0x61802100, 0x0, 0x0, 0x0, 0x0, 0x0) 16:52:10 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x0, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:10 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x0, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:10 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0x0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 559.199378][ T2937] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 559.439463][ T2937] usb 1-1: Using ep0 maxpacket: 32 [ 559.719546][ T2937] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 559.728621][ T2937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.736659][ T2937] usb 1-1: Product: syz [ 559.740862][ T2937] usb 1-1: Manufacturer: syz [ 559.745469][ T2937] usb 1-1: SerialNumber: syz [ 559.752458][ T2937] usb 1-1: config 0 descriptor?? [ 560.314214][ T2937] usb 1-1: USB disconnect, device number 32 [ 560.332867][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:52:11 executing program 4: socketpair(0xa, 0x3, 0x7a, &(0x7f0000000000)) 16:52:11 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:11 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0x0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:11 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc018ae85, &(0x7f00000004c0)) 16:52:11 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"956ff57cfd4eecbbfcfff5439071c04fbe75511156e960ac532f9cdee9f11f0c73711d3405eeaef7ad54f0d5494fe1c46f4e86c833528867e4991bc5f98bf2eb31f6b643aff6ed51b8a3bde6402d69c8d177a5a912b04b0ba6bd9289051352f854fa31bca41a2b3bd14aee0208b539fce312fc8333a420f6a7d01244565317179131b6c70551fc0f6fa1989e000560b958b783276ebcda2fc108118e077bfa670285f42f21cca47dc141f84d08bc59a47197b0df7b4b75caa6e995cd932a8c08f3d36c98027b395a74ec4b7a0911025c401f6218c4c7b93af1f092e54465872fae927615cf2db662fe7d62496075723dfc6ea192052a57b7b767f8c2e0d8d004d0dc87ba3fcfb2cf19f46c948db6f4c46717888fcdabb23d7a734e8cd4cad865ba263a4253e71906067ba38f23a885caf59c09bf2f2179429d83c1aee3cb2ab4aa96ff681d72a8fcef19b7fa9d6df3878f9f68d33d4bdba1a290064eb18b6b7354faf7d183f924a566b863342f5b1681117d9a37b95fbb68f7264e348ff3f2cef22bfaa89b2501616dd1365bf9c2b3b7b13610857a8c20dc9e86a425a3a53ec32539449d6d37f2dbca80ebb9a74e0e1228f23235ff31f606bf5aaab134e269db35ab94cb8b881c1bcb96e8b5152b685a7d8b74e5df9e00b62054b086081fcc9982731a26787e527ac9f11c473baee72aed3e81f2cc8525370070397745acaffa3d0c4f30965460b84d3ba1f4e78d5a4be04b88d2bdb274011928d5efb499a1f65f93034df06f8e9ff2c1ec0ce7872c468b8d7f42a716bb9bccbf961d1f84de164678a181f2c1ef98f7307f5f932096a6c8b66d249214d5bc4faf98d23b778c89f6851c65222907d7a097d497bf71da2ae8a50b4ebae3a578d403974d254e6889f22fb19f26675668bde7fc988470b7611c78f32dfb248ce5fb889730e6ebade4ae677ac07c67ddd8805b6de5530c6e0f3acae3564eb84399995d0af0cdf947620c59aed74f2b6cc850ad5cb3666dde4ded322ec770ab7fc3ebdeda3e092d42fa8b33527936dbae6f58b9f3b08c69d92551059a89e253ad1483db7f24c33515eaafe26ea2be7003e779f8bd42349f502092eeeccb7c0b1f06a2e308341f73954e1f4ce48a4ef60ce9ed64a2de01b7f6e115c1acc815a9aa808f85a631726fb6dbd901a24e6f5d79b9192e08f79392c1db84e80ba7ac4a78a600f0f25f37642467834f70acf344e3eeb1bc442589303cf3a07e15ea10d567814aef24a96198d7945123e85e36d4eaacf47893baf5ab185d26fcefe1c09faaf4eb7e95e063af2462f81ce0119fa4207cfeb382349eda733c84163bb70c58087f6986a91e70be7fc209329c6650735daa51fd92394ce37b59e0a69068360a9363ee9fe2eca6583cd178e7dbc9ed710dec95223ad400bde4f4319cb9cc0556b84cf6fcde9656ca2cfe"}) 16:52:11 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0x0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:11 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:11 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x0, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 560.850567][ T9588] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3790601254 (121299240128 ns) > initial count (50952694304 ns). Using initial count to start timer. 16:52:11 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:11 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) 16:52:11 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x0, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:11 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) [ 561.079292][ T2937] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 561.229264][ T5093] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 561.329288][ T2937] usb 1-1: Using ep0 maxpacket: 32 [ 561.469456][ T5093] usb 4-1: Using ep0 maxpacket: 8 [ 561.589555][ T5093] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 561.609791][ T2937] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 561.618864][ T2937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.627163][ T2937] usb 1-1: Product: syz [ 561.631483][ T2937] usb 1-1: Manufacturer: syz [ 561.636064][ T2937] usb 1-1: SerialNumber: syz [ 561.642321][ T2937] usb 1-1: config 0 descriptor?? [ 561.759340][ T5093] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 561.768399][ T5093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.777649][ T5093] usb 4-1: Product: syz [ 561.781929][ T5093] usb 4-1: Manufacturer: syz [ 561.786525][ T5093] usb 4-1: SerialNumber: syz [ 561.833344][ T5093] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 562.032919][ T3696] usb 4-1: USB disconnect, device number 4 [ 562.214234][ T2937] usb 1-1: USB disconnect, device number 33 16:52:13 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x0, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"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"}) 16:52:13 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:13 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8932, &(0x7f0000000140)) 16:52:13 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:13 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x0, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:13 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x0, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:13 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x0, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) [ 562.730848][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.737167][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 16:52:13 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x0, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"956ff57cfd4eecbbfcfff5439071c04fbe75511156e960ac532f9cdee9f11f0c73711d3405eeaef7ad54f0d5494fe1c46f4e86c833528867e4991bc5f98bf2eb31f6b643aff6ed51b8a3bde6402d69c8d177a5a912b04b0ba6bd9289051352f854fa31bca41a2b3bd14aee0208b539fce312fc8333a420f6a7d01244565317179131b6c70551fc0f6fa1989e000560b958b783276ebcda2fc108118e077bfa670285f42f21cca47dc141f84d08bc59a47197b0df7b4b75caa6e995cd932a8c08f3d36c98027b395a74ec4b7a0911025c401f6218c4c7b93af1f092e54465872fae927615cf2db662fe7d62496075723dfc6ea192052a57b7b767f8c2e0d8d004d0dc87ba3fcfb2cf19f46c948db6f4c46717888fcdabb23d7a734e8cd4cad865ba263a4253e71906067ba38f23a885caf59c09bf2f2179429d83c1aee3cb2ab4aa96ff681d72a8fcef19b7fa9d6df3878f9f68d33d4bdba1a290064eb18b6b7354faf7d183f924a566b863342f5b1681117d9a37b95fbb68f7264e348ff3f2cef22bfaa89b2501616dd1365bf9c2b3b7b13610857a8c20dc9e86a425a3a53ec32539449d6d37f2dbca80ebb9a74e0e1228f23235ff31f606bf5aaab134e269db35ab94cb8b881c1bcb96e8b5152b685a7d8b74e5df9e00b62054b086081fcc9982731a26787e527ac9f11c473baee72aed3e81f2cc8525370070397745acaffa3d0c4f30965460b84d3ba1f4e78d5a4be04b88d2bdb274011928d5efb499a1f65f93034df06f8e9ff2c1ec0ce7872c468b8d7f42a716bb9bccbf961d1f84de164678a181f2c1ef98f7307f5f932096a6c8b66d249214d5bc4faf98d23b778c89f6851c65222907d7a097d497bf71da2ae8a50b4ebae3a578d403974d254e6889f22fb19f26675668bde7fc988470b7611c78f32dfb248ce5fb889730e6ebade4ae677ac07c67ddd8805b6de5530c6e0f3acae3564eb84399995d0af0cdf947620c59aed74f2b6cc850ad5cb3666dde4ded322ec770ab7fc3ebdeda3e092d42fa8b33527936dbae6f58b9f3b08c69d92551059a89e253ad1483db7f24c33515eaafe26ea2be7003e779f8bd42349f502092eeeccb7c0b1f06a2e308341f73954e1f4ce48a4ef60ce9ed64a2de01b7f6e115c1acc815a9aa808f85a631726fb6dbd901a24e6f5d79b9192e08f79392c1db84e80ba7ac4a78a600f0f25f37642467834f70acf344e3eeb1bc442589303cf3a07e15ea10d567814aef24a96198d7945123e85e36d4eaacf47893baf5ab185d26fcefe1c09faaf4eb7e95e063af2462f81ce0119fa4207cfeb382349eda733c84163bb70c58087f6986a91e70be7fc209329c6650735daa51fd92394ce37b59e0a69068360a9363ee9fe2eca6583cd178e7dbc9ed710dec95223ad400bde4f4319cb9cc0556b84cf6fcde9656ca2cfe"}) 16:52:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f0000000a00)=""/132, 0x26, 0x84, 0x1}, 0x20) 16:52:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:13 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x0, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 562.964436][ T9653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3790601254 (121299240128 ns) > initial count (50952694304 ns). Using initial count to start timer. [ 563.029318][ T2937] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 563.289875][ T2937] usb 1-1: Using ep0 maxpacket: 32 [ 563.589517][ T2937] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 563.598612][ T2937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.606831][ T2937] usb 1-1: Product: syz [ 563.611223][ T2937] usb 1-1: Manufacturer: syz [ 563.615820][ T2937] usb 1-1: SerialNumber: syz [ 563.621777][ T2937] usb 1-1: config 0 descriptor?? [ 564.132943][ T2937] usb 1-1: USB disconnect, device number 34 16:52:15 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:15 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:15 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x0, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=[{0x18, 0x1, 0x1, "8e5bdac2"}], 0x18}, 0x0) 16:52:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"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"}) 16:52:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, 0x0, 0x0) 16:52:15 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x0, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:15 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x8, 0x0, [{}]}]}}, &(0x7f0000000a00)=""/132, 0x2e, 0x84, 0x1}, 0x20) 16:52:15 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x0, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) [ 564.715827][ T9665] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3790601254 (121299240128 ns) > initial count (50952694304 ns). Using initial count to start timer. [ 564.889395][ T3706] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 565.130378][ T3706] usb 1-1: Using ep0 maxpacket: 32 [ 565.409412][ T3706] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 565.418500][ T3706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.426516][ T3706] usb 1-1: Product: syz [ 565.430725][ T3706] usb 1-1: Manufacturer: syz [ 565.435320][ T3706] usb 1-1: SerialNumber: syz [ 565.445085][ T3706] usb 1-1: config 0 descriptor?? [ 565.993905][ T3706] usb 1-1: USB disconnect, device number 35 [ 566.006922][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:52:17 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000780309"], 0x0, 0x0, 0x0}, 0x0) 16:52:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x12002) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 16:52:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x0, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"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"}) 16:52:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:17 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) [ 566.501184][ T9699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3790601254 (121299240128 ns) > initial count (50952694304 ns). Using initial count to start timer. 16:52:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:17 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 566.719466][ T3696] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 566.959257][ T3696] usb 1-1: Using ep0 maxpacket: 32 [ 567.239663][ T3696] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 567.248878][ T3696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.257416][ T3696] usb 1-1: Product: syz [ 567.261683][ T3696] usb 1-1: Manufacturer: syz [ 567.266281][ T3696] usb 1-1: SerialNumber: syz [ 567.275047][ T3696] usb 1-1: config 0 descriptor?? [ 567.809837][ T3696] usb 1-1: USB disconnect, device number 36 16:52:19 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16:52:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:19 executing program 3: syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:52:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"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"}) 16:52:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:19 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:19 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 568.322192][ T9728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3790601254 (121299240128 ns) > initial count (50952694304 ns). Using initial count to start timer. 16:52:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) [ 568.559278][ T2937] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 568.799306][ T2937] usb 1-1: Using ep0 maxpacket: 32 [ 569.079532][ T2937] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 569.088613][ T2937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.096852][ T2937] usb 1-1: Product: syz [ 569.101311][ T2937] usb 1-1: Manufacturer: syz [ 569.105926][ T2937] usb 1-1: SerialNumber: syz [ 569.122941][ T2937] usb 1-1: config 0 descriptor?? [ 569.662930][ T2937] usb 1-1: USB disconnect, device number 37 [ 569.679617][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:52:21 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16:52:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:21 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:21 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8933, &(0x7f0000000140)) 16:52:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"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"}) 16:52:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:21 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8947, &(0x7f0000000140)) 16:52:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) [ 570.204049][ T9769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3790601254 (121299240128 ns) > initial count (50952694304 ns). Using initial count to start timer. [ 570.389352][ T3706] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 570.639308][ T3706] usb 1-1: Using ep0 maxpacket: 32 [ 570.929353][ T3706] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 570.938434][ T3706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.946594][ T3706] usb 1-1: Product: syz [ 570.950864][ T3706] usb 1-1: Manufacturer: syz [ 570.955459][ T3706] usb 1-1: SerialNumber: syz [ 570.962170][ T3706] usb 1-1: config 0 descriptor?? [ 571.473519][ T3706] usb 1-1: USB disconnect, device number 38 [ 571.486288][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:52:22 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16:52:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"956ff57cfd4eecbbfcfff5439071c04fbe75511156e960ac532f9cdee9f11f0c73711d3405eeaef7ad54f0d5494fe1c46f4e86c833528867e4991bc5f98bf2eb31f6b643aff6ed51b8a3bde6402d69c8d177a5a912b04b0ba6bd9289051352f854fa31bca41a2b3bd14aee0208b539fce312fc8333a420f6a7d01244565317179131b6c70551fc0f6fa1989e000560b958b783276ebcda2fc108118e077bfa670285f42f21cca47dc141f84d08bc59a47197b0df7b4b75caa6e995cd932a8c08f3d36c98027b395a74ec4b7a0911025c401f6218c4c7b93af1f092e54465872fae927615cf2db662fe7d62496075723dfc6ea192052a57b7b767f8c2e0d8d004d0dc87ba3fcfb2cf19f46c948db6f4c46717888fcdabb23d7a734e8cd4cad865ba263a4253e71906067ba38f23a885caf59c09bf2f2179429d83c1aee3cb2ab4aa96ff681d72a8fcef19b7fa9d6df3878f9f68d33d4bdba1a290064eb18b6b7354faf7d183f924a566b863342f5b1681117d9a37b95fbb68f7264e348ff3f2cef22bfaa89b2501616dd1365bf9c2b3b7b13610857a8c20dc9e86a425a3a53ec32539449d6d37f2dbca80ebb9a74e0e1228f23235ff31f606bf5aaab134e269db35ab94cb8b881c1bcb96e8b5152b685a7d8b74e5df9e00b62054b086081fcc9982731a26787e527ac9f11c473baee72aed3e81f2cc8525370070397745acaffa3d0c4f30965460b84d3ba1f4e78d5a4be04b88d2bdb274011928d5efb499a1f65f93034df06f8e9ff2c1ec0ce7872c468b8d7f42a716bb9bccbf961d1f84de164678a181f2c1ef98f7307f5f932096a6c8b66d249214d5bc4faf98d23b778c89f6851c65222907d7a097d497bf71da2ae8a50b4ebae3a578d403974d254e6889f22fb19f26675668bde7fc988470b7611c78f32dfb248ce5fb889730e6ebade4ae677ac07c67ddd8805b6de5530c6e0f3acae3564eb84399995d0af0cdf947620c59aed74f2b6cc850ad5cb3666dde4ded322ec770ab7fc3ebdeda3e092d42fa8b33527936dbae6f58b9f3b08c69d92551059a89e253ad1483db7f24c33515eaafe26ea2be7003e779f8bd42349f502092eeeccb7c0b1f06a2e308341f73954e1f4ce48a4ef60ce9ed64a2de01b7f6e115c1acc815a9aa808f85a631726fb6dbd901a24e6f5d79b9192e08f79392c1db84e80ba7ac4a78a600f0f25f37642467834f70acf344e3eeb1bc442589303cf3a07e15ea10d567814aef24a96198d7945123e85e36d4eaacf47893baf5ab185d26fcefe1c09faaf4eb7e95e063af2462f81ce0119fa4207cfeb382349eda733c84163bb70c58087f6986a91e70be7fc209329c6650735daa51fd92394ce37b59e0a69068360a9363ee9fe2eca6583cd178e7dbc9ed710dec95223ad400bde4f4319cb9cc0556b84cf6fcde9656ca2cfe"}) 16:52:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:22 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002a80)={r0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002a80)={r1, 0x0}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x16, 0x4, 0x3, 0x3, 0x1, r1, 0x80000000, '\x00', 0x0, r2, 0x1, 0x3, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0xfffffffffffffdfd, &(0x7f0000001140)}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000140)="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"}, 0x20) 16:52:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xe1}]}) 16:52:22 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x6cba}, 0x48) 16:52:23 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:23 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) [ 572.032334][ T9796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3790601254 (121299240128 ns) > initial count (50952694304 ns). Using initial count to start timer. [ 572.289465][ T5093] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 572.529262][ T5093] usb 1-1: Using ep0 maxpacket: 32 [ 572.841607][ T5093] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 572.850879][ T5093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.858859][ T5093] usb 1-1: Product: syz [ 572.863049][ T5093] usb 1-1: Manufacturer: syz [ 572.867648][ T5093] usb 1-1: SerialNumber: syz [ 572.874140][ T5093] usb 1-1: config 0 descriptor?? [ 573.385394][ T5093] usb 1-1: USB disconnect, device number 39 16:52:24 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 16:52:24 executing program 3: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1}], 0x1, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 16:52:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:24 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, 0x0) 16:52:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)={"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"}) 16:52:24 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x0, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:24 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 16:52:24 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x0, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:24 executing program 3: symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 16:52:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, 0x0) [ 574.129407][ T919] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 574.369287][ T919] usb 1-1: Using ep0 maxpacket: 32 [ 574.659445][ T919] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 574.668515][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.677732][ T919] usb 1-1: Product: syz [ 574.681939][ T919] usb 1-1: Manufacturer: syz [ 574.686533][ T919] usb 1-1: SerialNumber: syz [ 574.693091][ T919] usb 1-1: config 0 descriptor?? [ 575.214210][ T919] usb 1-1: USB disconnect, device number 40 16:52:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 16:52:26 executing program 3: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1}], 0x1, 0x0) poll(&(0x7f0000000100)=[{r0, 0x40}], 0x1, 0x0) 16:52:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)={"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"}) 16:52:26 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x0, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, 0x0) 16:52:26 executing program 3: mknod(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) 16:52:26 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:26 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r0, 0x1b, 0xffffffffffffffff) 16:52:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)) 16:52:26 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:26 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40}}}}}]}}]}}, 0x0) [ 575.999330][ T3692] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 576.089339][ T3703] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 576.249461][ T3692] usb 1-1: Using ep0 maxpacket: 32 [ 576.329312][ T3703] usb 4-1: Using ep0 maxpacket: 32 [ 576.449854][ T3703] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 576.579445][ T3692] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 576.588519][ T3692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.596549][ T3692] usb 1-1: Product: syz [ 576.600735][ T3692] usb 1-1: Manufacturer: syz [ 576.605311][ T3692] usb 1-1: SerialNumber: syz [ 576.611635][ T3692] usb 1-1: config 0 descriptor?? [ 576.619424][ T3703] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 576.628527][ T3703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.637715][ T3703] usb 4-1: Product: syz [ 576.641978][ T3703] usb 4-1: Manufacturer: syz [ 576.646624][ T3703] usb 4-1: SerialNumber: syz [ 576.669500][ T9881] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 576.892893][ T3703] usb 4-1: USB disconnect, device number 5 [ 577.134006][ T3692] usb 1-1: USB disconnect, device number 41 16:52:28 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 16:52:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:28 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)) 16:52:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)={"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"}) 16:52:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndmidi(0x0, 0x4, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4db0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000800}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) 16:52:28 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"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"}) 16:52:28 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:28 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)) [ 577.879265][ T3692] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 578.119337][ T3692] usb 1-1: Using ep0 maxpacket: 32 [ 578.399731][ T3692] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice=b8.03 [ 578.408805][ T3692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.416962][ T3692] usb 1-1: Product: syz [ 578.421278][ T3692] usb 1-1: Manufacturer: syz [ 578.425886][ T3692] usb 1-1: SerialNumber: syz [ 578.431622][ T3692] usb 1-1: config 0 descriptor?? [ 578.955310][ T3692] usb 1-1: USB disconnect, device number 42 [ 578.968723][ T3885] udevd[3885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 16:52:30 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x8e, 0xc7, 0x20, 0xa4e, 0x2040, 0xb803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x51, 0x36}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 16:52:30 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='rose0\x00', 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) 16:52:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"956ff57cfd4eecbbfcfff5439071c04fbe75511156e960ac532f9cdee9f11f0c73711d3405eeaef7ad54f0d5494fe1c46f4e86c833528867e4991bc5f98bf2eb31f6b643aff6ed51b8a3bde6402d69c8d177a5a912b04b0ba6bd9289051352f854fa31bca41a2b3bd14aee0208b539fce312fc8333a420f6a7d01244565317179131b6c70551fc0f6fa1989e000560b958b783276ebcda2fc108118e077bfa670285f42f21cca47dc141f84d08bc59a47197b0df7b4b75caa6e995cd932a8c08f3d36c98027b395a74ec4b7a0911025c401f6218c4c7b93af1f092e54465872fae927615cf2db662fe7d62496075723dfc6ea192052a57b7b767f8c2e0d8d004d0dc87ba3fcfb2cf19f46c948db6f4c46717888fcdabb23d7a734e8cd4cad865ba263a4253e71906067ba38f23a885caf59c09bf2f2179429d83c1aee3cb2ab4aa96ff681d72a8fcef19b7fa9d6df3878f9f68d33d4bdba1a290064eb18b6b7354faf7d183f924a566b863342f5b1681117d9a37b95fbb68f7264e348ff3f2cef22bfaa89b2501616dd1365bf9c2b3b7b13610857a8c20dc9e86a425a3a53ec32539449d6d37f2dbca80ebb9a74e0e1228f23235ff31f606bf5aaab134e269db35ab94cb8b881c1bcb96e8b5152b685a7d8b74e5df9e00b62054b086081fcc9982731a26787e527ac9f11c473baee72aed3e81f2cc8525370070397745acaffa3d0c4f30965460b84d3ba1f4e78d5a4be04b88d2bdb274011928d5efb499a1f65f93034df06f8e9ff2c1ec0ce7872c468b8d7f42a716bb9bccbf961d1f84de164678a181f2c1ef98f7307f5f932096a6c8b66d249214d5bc4faf98d23b778c89f6851c65222907d7a097d497bf71da2ae8a50b4ebae3a578d403974d254e6889f22fb19f26675668bde7fc988470b7611c78f32dfb248ce5fb889730e6ebade4ae677ac07c67ddd8805b6de5530c6e0f3acae3564eb84399995d0af0cdf947620c59aed74f2b6cc850ad5cb3666dde4ded322ec770ab7fc3ebdeda3e092d42fa8b33527936dbae6f58b9f3b08c69d92551059a89e253ad1483db7f24c33515eaafe26ea2be7003e779f8bd42349f502092eeeccb7c0b1f06a2e308341f73954e1f4ce48a4ef60ce9ed64a2de01b7f6e115c1acc815a9aa808f85a631726fb6dbd901a24e6f5d79b9192e08f79392c1db84e80ba7ac4a78a600f0f25f37642467834f70acf344e3eeb1bc442589303cf3a07e15ea10d567814aef24a96198d7945123e85e36d4eaacf47893baf5ab185d26fcefe1c09faaf4eb7e95e063af2462f81ce0119fa4207cfeb382349eda733c84163bb70c58087f6986a91e70be7fc209329c6650735daa51fd92394ce37b59e0a69068360a9363ee9fe2eca6583cd178e7dbc9ed710dec95223ad400bde4f4319cb9cc0556b84cf6fcde9656ca2cfe"}) 16:52:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{}]}) 16:52:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000e322000040"]) 16:52:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndmidi(0x0, 0x4, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4db0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000800}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) 16:52:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, 0x0) 16:52:30 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x77, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x8, @loopback, 0x800}}}, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x0, 0x2365, 0x1, 0x0, 0x4, 0x10000, 0x8, 0x3, 0xfffff1b0, 0x9000, 0x5, 0x2, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa51f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x4, &(0x7f0000000380)={0xa4ffffff, 'macvlan1\x00'}, 0x18) [ 579.528754][ T9946] ================================================================== [ 579.536848][ T9946] BUG: KASAN: use-after-free in io_sendrecv_fail+0x3b0/0x3e0 [ 579.544318][ T9946] Write of size 8 at addr ffff88807add9c80 by task syz-executor.3/9946 [ 579.552557][ T9946] [ 579.554880][ T9946] CPU: 1 PID: 9946 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220923-syzkaller #0 [ 579.564678][ T9946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 579.574737][ T9946] Call Trace: [ 579.578005][ T9946] [ 579.580925][ T9946] dump_stack_lvl+0xcd/0x134 [ 579.585579][ T9946] print_report+0x15e/0x45d [ 579.590115][ T9946] ? __phys_addr+0xc4/0x140 [ 579.594613][ T9946] ? io_sendrecv_fail+0x3b0/0x3e0 [ 579.599627][ T9946] kasan_report+0xbb/0x1f0 [ 579.604038][ T9946] ? io_sendrecv_fail+0x3b0/0x3e0 [ 579.609053][ T9946] io_sendrecv_fail+0x3b0/0x3e0 [ 579.613892][ T9946] ? io_sendmsg_zc+0xb00/0xb00 [ 579.618645][ T9946] io_req_complete_failed+0x155/0x1b0 [ 579.624020][ T9946] io_queue_sqe_fallback.cold+0x29f/0x788 [ 579.629764][ T9946] io_submit_sqes+0x1180/0x1df0 [ 579.634619][ T9946] __do_sys_io_uring_enter+0xac6/0x2410 [ 579.640161][ T9946] ? lock_release+0x5cb/0x810 [ 579.644827][ T9946] ? __ct_user_exit+0xff/0x150 [ 579.649606][ T9946] ? io_submit_sqes+0x1df0/0x1df0 [ 579.654628][ T9946] ? lock_downgrade+0x6e0/0x6e0 [ 579.659465][ T9946] ? restore_fpregs_from_fpstate+0xbd/0x1c0 [ 579.665355][ T9946] ? vtime_user_exit+0x218/0x6c0 [ 579.670291][ T9946] ? syscall_enter_from_user_mode+0x22/0xb0 [ 579.676179][ T9946] ? trace_hardirqs_on+0x2d/0x160 [ 579.681210][ T9946] do_syscall_64+0x35/0xb0 [ 579.685616][ T9946] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 579.691563][ T9946] RIP: 0033:0x7fd89428a5a9 [ 579.695967][ T9946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 579.715566][ T9946] RSP: 002b:00007fd895368168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 579.723977][ T9946] RAX: ffffffffffffffda RBX: 00007fd8943ac050 RCX: 00007fd89428a5a9 [ 579.731962][ T9946] RDX: 0000000000000000 RSI: 00000000000002fe RDI: 0000000000000005 [ 579.739920][ T9946] RBP: 00007fd8942e5580 R08: 0000000000000000 R09: 0000000000000000 [ 579.747894][ T9946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.755873][ T9946] R13: 00007ffcbfcc864f R14: 00007fd895368300 R15: 0000000000022000 [ 579.763837][ T9946] [ 579.766841][ T9946] [ 579.769151][ T9946] Allocated by task 9946: [ 579.773463][ T9946] kasan_save_stack+0x1e/0x40 [ 579.778149][ T9946] kasan_set_track+0x21/0x30 [ 579.782774][ T9946] __kasan_kmalloc+0xa1/0xb0 [ 579.787356][ T9946] __kmalloc+0x54/0xc0 [ 579.791421][ T9946] io_alloc_async_data+0x9b/0x160 [ 579.796439][ T9946] io_sendmsg_prep_async+0x19b/0x3c0 [ 579.801708][ T9946] io_req_prep_async+0x1d9/0x300 [ 579.806636][ T9946] io_queue_sqe_fallback.cold+0x281/0x788 [ 579.812357][ T9946] io_submit_sqes+0x1180/0x1df0 [ 579.817215][ T9946] __do_sys_io_uring_enter+0xac6/0x2410 [ 579.820691][ T3692] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 579.822745][ T9946] do_syscall_64+0x35/0xb0 [ 579.822772][ T9946] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 579.840573][ T9946] [ 579.842882][ T9946] Freed by task 9946: [ 579.846857][ T9946] kasan_save_stack+0x1e/0x40 [ 579.851530][ T9946] kasan_set_track+0x21/0x30 [ 579.856110][ T9946] kasan_save_free_info+0x2a/0x40 [ 579.861120][ T9946] ____kasan_slab_free+0x160/0x1c0 [ 579.866221][ T9946] slab_free_freelist_hook+0x8b/0x1c0 [ 579.871586][ T9946] __kmem_cache_free+0xab/0x3b0 [ 579.876430][ T9946] io_sendrecv_fail+0x2a4/0x3e0 [ 579.881265][ T9946] io_req_complete_failed+0x155/0x1b0 [ 579.886641][ T9946] io_queue_sqe_fallback.cold+0x29f/0x788 [ 579.892380][ T9946] io_submit_sqes+0x1180/0x1df0 [ 579.897221][ T9946] __do_sys_io_uring_enter+0xac6/0x2410 [ 579.902759][ T9946] do_syscall_64+0x35/0xb0 [ 579.907163][ T9946] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 579.913145][ T9946] [ 579.915450][ T9946] Last potentially related work creation: [ 579.921161][ T9946] kasan_save_stack+0x1e/0x40 [ 579.925843][ T9946] __kasan_record_aux_stack+0xbc/0xd0 [ 579.931208][ T9946] call_rcu+0x99/0x820 [ 579.935276][ T9946] inetdev_event+0xd4a/0x1610 [ 579.939985][ T9946] notifier_call_chain+0xb5/0x200 [ 579.945002][ T9946] call_netdevice_notifiers_info+0xb5/0x130 [ 579.950917][ T9946] unregister_netdevice_many+0xaef/0x1a40 [ 579.956659][ T9946] ip_tunnel_delete_nets+0x39f/0x5b0 [ 579.961984][ T9946] ops_exit_list+0x125/0x170 [ 579.966558][ T9946] cleanup_net+0x4ea/0xb00 [ 579.970972][ T9946] process_one_work+0x9bf/0x1710 [ 579.975931][ T9946] worker_thread+0x665/0x1080 [ 579.980605][ T9946] kthread+0x2e4/0x3a0 [ 579.984669][ T9946] ret_from_fork+0x1f/0x30 [ 579.989083][ T9946] [ 579.991391][ T9946] The buggy address belongs to the object at ffff88807add9c00 [ 579.991391][ T9946] which belongs to the cache kmalloc-512 of size 512 [ 580.005431][ T9946] The buggy address is located 128 bytes inside of [ 580.005431][ T9946] 512-byte region [ffff88807add9c00, ffff88807add9e00) [ 580.018693][ T9946] [ 580.021007][ T9946] The buggy address belongs to the physical page: [ 580.027409][ T9946] page:ffffea0001eb7600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffea0001ec4c00 pfn:0x7add8 [ 580.039022][ T9946] head:ffffea0001eb7600 order:2 compound_mapcount:0 compound_pincount:0 [ 580.047328][ T9946] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 580.055299][ T9946] raw: 00fff00000010200 ffff888011841c80 dead00008010000f ffff88807adda400 [ 580.063872][ T9946] raw: ffffea0001ec4c00 dead000000000002 00000001ffffffff 0000000000000000 [ 580.072434][ T9946] page dumped because: kasan: bad access detected [ 580.078832][ T9946] page_owner tracks the page as allocated [ 580.084528][ T9946] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16, tgid 16 (ksoftirqd/0), ts 83194032754, free_ts 73470470710 [ 580.104916][ T9946] get_page_from_freelist+0x1092/0x2d20 [ 580.110464][ T9946] __alloc_pages+0x1c7/0x5a0 [ 580.115067][ T9946] alloc_pages+0x1a6/0x270 [ 580.119482][ T9946] allocate_slab+0x213/0x300 [ 580.124073][ T9946] ___slab_alloc+0xac1/0x1430 [ 580.128741][ T9946] __slab_alloc.constprop.0+0x4d/0xa0 [ 580.134116][ T9946] __kmem_cache_alloc_node+0x18a/0x3d0 [ 580.139567][ T9946] __kmalloc_node_track_caller+0x45/0xc0 [ 580.145192][ T9946] __alloc_skb+0xd9/0x2f0 [ 580.149533][ T9946] __napi_alloc_skb+0x93/0x340 [ 580.154282][ T9946] page_to_skb+0x17d/0xc80 [ 580.158734][ T9946] receive_buf+0xe0a/0x5560 [ 580.163225][ T9946] virtnet_poll+0x708/0x1310 [ 580.167805][ T9946] __napi_poll+0xb8/0x770 [ 580.172123][ T9946] net_rx_action+0x9fc/0xde0 [ 580.176699][ T9946] __do_softirq+0x1f7/0xad8 [ 580.181189][ T9946] page last free stack trace: [ 580.185843][ T9946] free_pcp_prepare+0x65c/0xd90 [ 580.190686][ T9946] free_unref_page+0x19/0x4d0 [ 580.195348][ T9946] qlist_free_all+0x6a/0x170 [ 580.199924][ T9946] kasan_quarantine_reduce+0x180/0x200 [ 580.205370][ T9946] __kasan_slab_alloc+0x62/0x80 [ 580.210210][ T9946] kmem_cache_alloc_node+0x2ff/0x400 [ 580.215485][ T9946] __alloc_skb+0x210/0x2f0 [ 580.219897][ T9946] tcp_stream_alloc_skb+0x38/0x580 [ 580.225057][ T9946] tcp_sendmsg_locked+0xc36/0x2f90 [ 580.230156][ T9946] tcp_sendmsg+0x2b/0x40 [ 580.234392][ T9946] inet_sendmsg+0x99/0xe0 [ 580.238733][ T9946] sock_sendmsg+0xcf/0x120 [ 580.243213][ T9946] sock_write_iter+0x291/0x3d0 [ 580.247979][ T9946] vfs_write+0x9e9/0xdd0 [ 580.252231][ T9946] ksys_write+0x1e8/0x250 [ 580.256569][ T9946] do_syscall_64+0x35/0xb0 [ 580.261067][ T9946] [ 580.263385][ T9946] Memory state around the buggy address: [ 580.269005][ T9946] ffff88807add9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 580.277056][ T9946] ffff88807add9c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 580.285099][ T9946] >ffff88807add9c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 580.293140][ T9946] ^ [ 580.297641][ T9946] ffff88807add9d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 580.305685][ T9946] ffff88807add9d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 580.313918][ T9946] ================================================================== [ 580.350601][ T9946] Kernel panic - not syncing: panic_on_warn set ... [ 580.357232][ T9946] CPU: 0 PID: 9946 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220923-syzkaller #0 [ 580.367057][ T9946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 580.377136][ T9946] Call Trace: [ 580.380410][ T9946] [ 580.383418][ T9946] dump_stack_lvl+0xcd/0x134 [ 580.388009][ T9946] panic+0x2c8/0x622 [ 580.391928][ T9946] ? panic_print_sys_info.part.0+0x110/0x110 [ 580.397909][ T9946] ? preempt_schedule_common+0x59/0xc0 [ 580.403361][ T9946] ? preempt_schedule_thunk+0x16/0x18 [ 580.408732][ T9946] end_report.part.0+0x3f/0x7c [ 580.413493][ T9946] ? io_sendrecv_fail+0x3b0/0x3e0 [ 580.418510][ T9946] kasan_report.cold+0xa/0xf [ 580.423097][ T9946] ? io_sendrecv_fail+0x3b0/0x3e0 [ 580.428115][ T9946] io_sendrecv_fail+0x3b0/0x3e0 [ 580.432956][ T9946] ? io_sendmsg_zc+0xb00/0xb00 [ 580.437740][ T9946] io_req_complete_failed+0x155/0x1b0 [ 580.443119][ T9946] io_queue_sqe_fallback.cold+0x29f/0x788 16:52:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{}]}) [ 580.448865][ T9946] io_submit_sqes+0x1180/0x1df0 [ 580.453720][ T9946] __do_sys_io_uring_enter+0xac6/0x2410 [ 580.459280][ T9946] ? lock_release+0x5cb/0x810 [ 580.463954][ T9946] ? __ct_user_exit+0xff/0x150 [ 580.468716][ T9946] ? io_submit_sqes+0x1df0/0x1df0 [ 580.473745][ T9946] ? lock_downgrade+0x6e0/0x6e0 [ 580.478615][ T9946] ? restore_fpregs_from_fpstate+0xbd/0x1c0 [ 580.484557][ T9946] ? vtime_user_exit+0x218/0x6c0 [ 580.489538][ T9946] ? syscall_enter_from_user_mode+0x22/0xb0 [ 580.495464][ T9946] ? trace_hardirqs_on+0x2d/0x160 [ 580.500517][ T9946] do_syscall_64+0x35/0xb0 [ 580.504959][ T9946] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 580.510874][ T9946] RIP: 0033:0x7fd89428a5a9 [ 580.515296][ T9946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 580.534908][ T9946] RSP: 002b:00007fd895368168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 580.543334][ T9946] RAX: ffffffffffffffda RBX: 00007fd8943ac050 RCX: 00007fd89428a5a9 [ 580.551296][ T9946] RDX: 0000000000000000 RSI: 00000000000002fe RDI: 0000000000000005 [ 580.559267][ T9946] RBP: 00007fd8942e5580 R08: 0000000000000000 R09: 0000000000000000 [ 580.567234][ T9946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.575207][ T9946] R13: 00007ffcbfcc864f R14: 00007fd895368300 R15: 0000000000022000 [ 580.583181][ T9946] [ 580.586394][ T9946] Kernel Offset: disabled [ 580.590711][ T9946] Rebooting in 86400 seconds..