1\x00', 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004043b2c550008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b0000000000000000000be9505050505050"], 0x448}}, 0x0) syz_open_dev$vcsu(&(0x7f0000002040), 0xa6, 0x400c40) (async) r4 = syz_open_dev$vcsu(&(0x7f0000002040), 0xa6, 0x400c40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20000023896) syz_io_uring_setup(0x3edc, &(0x7f00000000c0)={0x0, 0xff25, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000840)={&(0x7f0000000540)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r16, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newqdisc={0x58, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x58}}, 0x0) r17 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x8, 0x0, r11, &(0x7f0000000040)={0x20000000}, r12, 0x3, 0x0, 0x1, {0x0, r17}}, 0x8) kcmp(0x0, 0x0, 0x3, r12, r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01266070f200c65f05000000020800000000", @ANYRES32=r18, @ANYBLOB="0c00990000000000000000000800270003000000080026008f090000"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01266070f200c65f05000000020800000000", @ANYRES32=r18, @ANYBLOB="0c00990000000000000000000800270003000000080026008f090000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x2c, r5, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000a850) 18:38:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:00 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004043b2c550008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b0000000000000000000be9505050505050"], 0x448}}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000002040), 0xa6, 0x400c40) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20000023896) syz_io_uring_setup(0x3edc, &(0x7f00000000c0)={0x0, 0xff25, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000840)={&(0x7f0000000540)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) (async) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) (async) r14 = socket$netlink(0x10, 0x3, 0x0) (async) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r16, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newqdisc={0x58, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x58}}, 0x0) r17 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x8, 0x0, r11, &(0x7f0000000040)={0x20000000}, r12, 0x3, 0x0, 0x1, {0x0, r17}}, 0x8) (async) kcmp(0x0, 0x0, 0x3, r12, r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01266070f200c65f05000000020800000000", @ANYRES32=r18, @ANYBLOB="0c00990000000000000000000800270003000000080026008f090000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x2c, r5, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000a850) [ 2232.083305][T17965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2232.101264][ T2558] xt_limit: Overflow, try lower: 1241513984/7 [ 2232.111395][T17965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.166345][T17965] usb 5-1: config 0 descriptor?? [ 2232.278984][ T2558] vlan2: entered promiscuous mode [ 2232.313806][ T2558] macvtap0: entered promiscuous mode [ 2232.328387][ T2558] vlan2: entered allmulticast mode [ 2232.334517][ T2558] macvtap0: entered allmulticast mode [ 2232.342222][ T2558] veth0_macvtap: entered allmulticast mode [ 2232.354868][ T2558] macvtap0: left allmulticast mode [ 2232.375945][ T2558] veth0_macvtap: left allmulticast mode [ 2232.385835][ T2558] macvtap0: left promiscuous mode [ 2232.434552][T17965] ath6kl: Failed to submit usb control message: -71 [ 2232.441422][T17965] ath6kl: unable to send the bmi data to the device: -71 [ 2232.458145][T17965] ath6kl: Unable to send get target info: -71 [ 2232.481492][T17965] ath6kl: Failed to init ath6kl core: -71 [ 2232.563033][T17965] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 2232.616674][T17965] usb 5-1: USB disconnect, device number 98 18:38:03 executing program 3: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) dup2(r1, r2) accept4(r1, &(0x7f00000002c0)=@vsock, 0x0, 0x800) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3101804}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=@ipv6_newaddr={0x58, 0x14, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x40, 0x10, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x69}, @IFA_CACHEINFO={0x14, 0x6, {0xd275, 0x200, 0x3, 0x8}}, @IFA_FLAGS={0x8, 0x8, 0x202}, @IFA_RT_PRIORITY={0x8, 0x9, 0xd19}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200048c1}, 0x801) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048010) r6 = socket(0x10, 0x803, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x418106}}, 0x50) dup3(0xffffffffffffffff, r7, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)={0x200, 0x1, 0x8}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x6}, &(0x7f0000000280)=0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r9], 0x30}}, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r10}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r11, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 18:38:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:03 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_connect$hid(0xffe758cc7b23dff1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x996}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x0, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1f, 0x5, 0x7}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x6f, 0x8, 0x6, 0xff, 0x65}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x7c, &(0x7f0000000140)=@string={0x7c, 0x3, "c02a437bb07e92c73be3e4b093d206dd135156374e899fbc7cef1ae96cbf04c2e05eeb09b51e818293b2b31c01cd71a0f1c057e5ecef02f1d45475936be3ef5b4b1baadb63fec5a7e5b2c0dc7ce9f452bf824e2b33bd1e3eee8f87e79502e1052ff47cd4153073245eeee80055a8ba44cfa9943320379471c0fe"}}, {0x35, &(0x7f00000000c0)=@string={0x35, 0x3, "884393def7aaf14b8c87f53af2fec429ec16e339d54e77af6ac5740d3567dd3745129df9adabfe0e019e8ad90ac36d3e5c2843"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x9a, &(0x7f0000000200)=@string={0x9a, 0x3, "b89a75da5d4a1db3c5f5edcad23a9149d03219528dc5b1b5fa2fb777960963b48002016e2c2a3574b91243645075be978692badea4378bedd51cbc01402bb012c4130c5a3a2a326adbe884e6416d7b6ab663c31a25c22b052299d4c05dd564e5ea5fed8e2a344b408eed2a05f988f43fe9240f2ddd3590bbdf7eba8abd8263d2da2ff712a080ff91884cef3ed3225bbfd30e06d71ef6f5b5"}}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:38:03 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0185502, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2234.882217][ T2572] xt_limit: Overflow, try lower: 1241513984/7 [ 2235.040679][ T2568] vlan2: entered promiscuous mode [ 2235.082811][T25772] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2235.101099][ T2568] macvtap0: entered promiscuous mode [ 2235.113172][ T2568] vlan2: entered allmulticast mode [ 2235.138442][ T2568] macvtap0: entered allmulticast mode [ 2235.185856][ T2568] veth0_macvtap: entered allmulticast mode [ 2235.266128][ T2568] macvtap0: left allmulticast mode [ 2235.310850][ T2568] veth0_macvtap: left allmulticast mode [ 2235.358901][ T2568] macvtap0: left promiscuous mode [ 2235.482888][T25772] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2235.512900][T25772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.590222][T25772] usb 5-1: config 0 descriptor?? [ 2235.754652][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2235.798227][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2235.867955][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2235.923007][T25772] ath6kl: Unsupported hardware version: 0x0 18:38:04 executing program 3: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) dup2(r1, r2) accept4(r1, &(0x7f00000002c0)=@vsock, 0x0, 0x800) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r3) (async) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3101804}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=@ipv6_newaddr={0x58, 0x14, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x40, 0x10, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x69}, @IFA_CACHEINFO={0x14, 0x6, {0xd275, 0x200, 0x3, 0x8}}, @IFA_FLAGS={0x8, 0x8, 0x202}, @IFA_RT_PRIORITY={0x8, 0x9, 0xd19}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200048c1}, 0x801) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048010) r6 = socket(0x10, 0x803, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x418106}}, 0x50) dup3(0xffffffffffffffff, r7, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)={0x200, 0x1, 0x8}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x6}, &(0x7f0000000280)=0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r9], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r9], 0x30}}, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r10}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r11, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) (async) sendto$inet6(r11, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 2236.144766][T25772] ath6kl: Failed to init ath6kl core: -22 18:38:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2236.289235][T25772] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2236.322320][ T2588] xt_limit: Overflow, try lower: 1241513984/7 [ 2236.356336][T25772] usb 5-1: USB disconnect, device number 99 [ 2236.481173][ T2588] vlan2: entered promiscuous mode [ 2236.515805][ T2588] macvtap0: entered promiscuous mode [ 2236.571704][ T2588] vlan2: entered allmulticast mode [ 2236.594645][ T2588] macvtap0: entered allmulticast mode [ 2236.600457][ T2588] veth0_macvtap: entered allmulticast mode [ 2236.694815][ T2588] macvtap0: left allmulticast mode [ 2236.713842][ T2588] veth0_macvtap: left allmulticast mode [ 2236.727008][ T2588] macvtap0: left promiscuous mode 18:38:06 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x3, 0x58, {0x58, 0x0, "4b48800bbc2a9e9c3d9ff844822600ec756a97f6450e25d24d1ae00a3692ab16964b212e26ed7e27524e890205fd0f26e9e4051e9ce03160ecf8935d7b8bfe491bfef8b45a46d31ce61deca1fd9baa27e7d2334996d8"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0x10, 0xb8, "5a441906bbbb41c623d03c8b15518199e29aa5f552586c2dc9f2b18bf38d1af132d493c22aacb15834f62e051c38e5ae7c49107a7b089f340c45515bab12b781b54c351d68f0c72a1830bb1cbdbf084548d741c9170d407a2d848334d41f7f6a82054a2dce703b985427b5f8e2fb6f3e56838c3366101003c71bcf311b99a6744782eada9a1026657f8d80071764a8f49c1eded3ec1477ff2242acb0c2908833fd4bc582495e4e91e054fd895030356f0eaefff311d10bdb"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x20}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x11d, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x3, 0x1, 0x6, 0x50, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x67}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x3, 0x81, 0x81, 0x74, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x6, 0x2, [0x9, 0x5], 0x7}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x8000, 0x5, "35cc4b6f"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x6, 0x1, 0x74f, 0x8, 0x6}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x7f, "d687a42a90"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1f087cd3c1248aed, 0x3, 0x1, 0x30}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0xc8, 0x81, 'G', "d5de03"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1f, 0x4, "1a6ef3f5"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3f, 0x5, "", "be"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x2, 0xb, {0x7, 0x25, 0x1, 0x80, 0x20, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x81, 0x4, "15be"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa4, 0x7, 0x3, "9f2ace52846658"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x4, 0x81, 0x3f, 'l', "aa"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x80, "e44d9223b4"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0xff, 0x4, "10059abf8f0d966f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x4, 0x5, {0x7, 0x25, 0x1, 0x143, 0x2}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x310, 0x7f, 0x3c, 0x9, 0x10, 0x20}, 0x19, &(0x7f0000000d40)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "a559a8afcee52d0ef43b979d02aa65a6"}]}, 0x4, [{0x62, &(0x7f0000000d80)=@string={0x62, 0x3, "6d44eb5c90fb81ca09aa57be11c356d0da8d392ac779fa39a135e54e751c295c4138d0228257e19cd874b99a17cbf5d180314d7a5e59d780ed1ea966e79920fe82647bef39bd0e3cf8dfcd587b51de5fa34c9f4ec676cdd3855c0d8af060d87d"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x425}}]}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x20, 0x0, 0x102, {0x102, 0xd, "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"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000000480)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "3ac2686156816c0d5c0247e1b8a6f05e"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x8, 0xd821}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x4, 0xffff}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x3f, 0x40, "57b48552", "0131370a"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x9, 0xfc, 0x81, 0x80, 0xe4}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000580)={0x4ab92b3afe73702e, 0x10, 0xed, "a865bdce6dfce5a3f34045845077d049997a8e1841493153e2267157fab96bd12ab8004e0c2f8c3d65918a21d3b6bc61e431c55afe2103231c8fef79a605e5a44460eb380e2de49fdfbb9f3c57446b08d726ce688959da7a147c962276532609a5763391b0269287d662745ce1f0c30f582157cb1ae8259c96c12ad6324812318ab7bf73599ff88d12769ed356bf124c8411d855f28614b5c714ec12a5e4dad796dca817a3e213c5c82707b68c5a309862ace5dee500578870a8879031fb422977364733f9942c4fec06856e94d4b322ae80bfc11560fc47965875c962c667b5d712b3664ca71b0bf128b17ead"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xd1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xa0, 0x1, [0xf00f]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x80}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a720"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0xfff8}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "99e3"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xff67}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x40}}) 18:38:06 executing program 3: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) dup2(r1, r2) (async) accept4(r1, &(0x7f00000002c0)=@vsock, 0x0, 0x800) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3101804}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=@ipv6_newaddr={0x58, 0x14, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x40, 0x10, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x69}, @IFA_CACHEINFO={0x14, 0x6, {0xd275, 0x200, 0x3, 0x8}}, @IFA_FLAGS={0x8, 0x8, 0x202}, @IFA_RT_PRIORITY={0x8, 0x9, 0xd19}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200048c1}, 0x801) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048010) (rerun: 32) r6 = socket(0x10, 0x803, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x418106}}, 0x50) (async) dup3(0xffffffffffffffff, r7, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)={0x200, 0x1, 0x8}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x6}, &(0x7f0000000280)=0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r9], 0x30}}, 0x0) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r10}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r11, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 2237.542807][T20101] usb 5-1: new high-speed USB device number 100 using dummy_hcd 18:38:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x0, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x4000, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:38:06 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x0, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2237.831451][ T2612] xt_limit: Overflow, try lower: 1241513984/7 [ 2237.909480][ T2615] hub 9-0:1.0: USB hub found [ 2237.947920][ T2615] hub 9-0:1.0: 8 ports detected [ 2237.953134][T20101] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2237.962234][T20101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.037207][ T2612] vlan2: entered promiscuous mode [ 2238.057244][T20101] usb 5-1: config 0 descriptor?? [ 2238.072095][ T2612] macvtap0: entered promiscuous mode [ 2238.108155][ T2612] vlan2: entered allmulticast mode [ 2238.154817][ T2612] macvtap0: entered allmulticast mode [ 2238.193769][ T2612] veth0_macvtap: entered allmulticast mode [ 2238.221636][ T2612] macvtap0: left allmulticast mode [ 2238.233281][ T2612] veth0_macvtap: left allmulticast mode [ 2238.247316][ T2612] macvtap0: left promiscuous mode 18:38:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2238.553001][T20101] ath6kl: Failed to read usb control message: -32 [ 2238.567156][T20101] ath6kl: Unable to read the bmi data from the device: -32 [ 2238.641243][T20101] ath6kl: Unable to recv target info: -32 [ 2238.719156][ T2628] xt_limit: Overflow, try lower: 1241513984/7 [ 2238.805351][ T2628] vlan2: entered promiscuous mode [ 2238.817786][ T2628] macvtap0: entered promiscuous mode [ 2238.834783][ T2628] vlan2: entered allmulticast mode [ 2238.840205][ T2628] macvtap0: entered allmulticast mode [ 2238.860668][ T2628] veth0_macvtap: entered allmulticast mode [ 2238.892299][ T2628] macvtap0: left allmulticast mode [ 2238.905926][ T2628] veth0_macvtap: left allmulticast mode [ 2238.912331][ T2628] macvtap0: left promiscuous mode 18:38:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2239.253680][ T2633] xt_limit: Overflow, try lower: 1241513984/7 [ 2239.369045][ T2633] vlan2: entered promiscuous mode [ 2239.381085][ T2633] macvtap0: entered promiscuous mode [ 2239.402155][ T2633] vlan2: entered allmulticast mode [ 2239.414427][T20101] ath6kl: Failed to init ath6kl core: -32 [ 2239.416903][ T2633] macvtap0: entered allmulticast mode [ 2239.439767][ T2633] veth0_macvtap: entered allmulticast mode [ 2239.489161][T20101] ath6kl_usb: probe of 5-1:0.0 failed with error -32 [ 2239.493241][ T2633] macvtap0: left allmulticast mode [ 2239.508396][ T2633] veth0_macvtap: left allmulticast mode [ 2239.524859][ T2633] macvtap0: left promiscuous mode 18:38:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2239.924874][ T2637] xt_limit: Overflow, try lower: 1241513984/7 [ 2240.145577][ T2637] vlan2: entered promiscuous mode [ 2240.211908][ T2637] macvtap0: entered promiscuous mode [ 2240.275740][ T2637] vlan2: entered allmulticast mode [ 2240.291801][T25772] usb 5-1: USB disconnect, device number 100 [ 2240.364171][ T2637] macvtap0: entered allmulticast mode [ 2240.423314][ T2637] veth0_macvtap: entered allmulticast mode [ 2240.540047][ T2637] macvtap0: left allmulticast mode [ 2240.572290][ T2637] veth0_macvtap: left allmulticast mode [ 2240.612831][ T2637] macvtap0: left promiscuous mode 18:38:10 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0189436, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x3, 0x58, {0x58, 0x0, "4b48800bbc2a9e9c3d9ff844822600ec756a97f6450e25d24d1ae00a3692ab16964b212e26ed7e27524e890205fd0f26e9e4051e9ce03160ecf8935d7b8bfe491bfef8b45a46d31ce61deca1fd9baa27e7d2334996d8"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0x10, 0xb8, "5a441906bbbb41c623d03c8b15518199e29aa5f552586c2dc9f2b18bf38d1af132d493c22aacb15834f62e051c38e5ae7c49107a7b089f340c45515bab12b781b54c351d68f0c72a1830bb1cbdbf084548d741c9170d407a2d848334d41f7f6a82054a2dce703b985427b5f8e2fb6f3e56838c3366101003c71bcf311b99a6744782eada9a1026657f8d80071764a8f49c1eded3ec1477ff2242acb0c2908833fd4bc582495e4e91e054fd895030356f0eaefff311d10bdb"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x20}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x11d, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x3, 0x1, 0x6, 0x50, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x67}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x3, 0x81, 0x81, 0x74, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x6, 0x2, [0x9, 0x5], 0x7}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x8000, 0x5, "35cc4b6f"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x6, 0x1, 0x74f, 0x8, 0x6}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x7f, "d687a42a90"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1f087cd3c1248aed, 0x3, 0x1, 0x30}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0xc8, 0x81, 'G', "d5de03"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1f, 0x4, "1a6ef3f5"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3f, 0x5, "", "be"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x2, 0xb, {0x7, 0x25, 0x1, 0x80, 0x20, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x81, 0x4, "15be"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa4, 0x7, 0x3, "9f2ace52846658"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x4, 0x81, 0x3f, 'l', "aa"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x80, "e44d9223b4"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0xff, 0x4, "10059abf8f0d966f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x4, 0x5, {0x7, 0x25, 0x1, 0x143, 0x2}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x310, 0x7f, 0x3c, 0x9, 0x10, 0x20}, 0x19, &(0x7f0000000d40)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "a559a8afcee52d0ef43b979d02aa65a6"}]}, 0x4, [{0x62, &(0x7f0000000d80)=@string={0x62, 0x3, "6d44eb5c90fb81ca09aa57be11c356d0da8d392ac779fa39a135e54e751c295c4138d0228257e19cd874b99a17cbf5d180314d7a5e59d780ed1ea966e79920fe82647bef39bd0e3cf8dfcd587b51de5fa34c9f4ec676cdd3855c0d8af060d87d"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x425}}]}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x20, 0x0, 0x102, {0x102, 0xd, "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"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000000480)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "3ac2686156816c0d5c0247e1b8a6f05e"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x8, 0xd821}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x4, 0xffff}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x3f, 0x40, "57b48552", "0131370a"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x9, 0xfc, 0x81, 0x80, 0xe4}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000580)={0x4ab92b3afe73702e, 0x10, 0xed, "a865bdce6dfce5a3f34045845077d049997a8e1841493153e2267157fab96bd12ab8004e0c2f8c3d65918a21d3b6bc61e431c55afe2103231c8fef79a605e5a44460eb380e2de49fdfbb9f3c57446b08d726ce688959da7a147c962276532609a5763391b0269287d662745ce1f0c30f582157cb1ae8259c96c12ad6324812318ab7bf73599ff88d12769ed356bf124c8411d855f28614b5c714ec12a5e4dad796dca817a3e213c5c82707b68c5a309862ace5dee500578870a8879031fb422977364733f9942c4fec06856e94d4b322ae80bfc11560fc47965875c962c667b5d712b3664ca71b0bf128b17ead"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xd1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xa0, 0x1, [0xf00f]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x80}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a720"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0xfff8}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "99e3"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xff67}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x40}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x3, 0x58, {0x58, 0x0, "4b48800bbc2a9e9c3d9ff844822600ec756a97f6450e25d24d1ae00a3692ab16964b212e26ed7e27524e890205fd0f26e9e4051e9ce03160ecf8935d7b8bfe491bfef8b45a46d31ce61deca1fd9baa27e7d2334996d8"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0x10, 0xb8, "5a441906bbbb41c623d03c8b15518199e29aa5f552586c2dc9f2b18bf38d1af132d493c22aacb15834f62e051c38e5ae7c49107a7b089f340c45515bab12b781b54c351d68f0c72a1830bb1cbdbf084548d741c9170d407a2d848334d41f7f6a82054a2dce703b985427b5f8e2fb6f3e56838c3366101003c71bcf311b99a6744782eada9a1026657f8d80071764a8f49c1eded3ec1477ff2242acb0c2908833fd4bc582495e4e91e054fd895030356f0eaefff311d10bdb"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x20}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$uac1(0x4, 0x11d, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x3, 0x1, 0x6, 0x50, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x67}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x3, 0x81, 0x81, 0x74, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x6, 0x2, [0x9, 0x5], 0x7}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x8000, 0x5, "35cc4b6f"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x6, 0x1, 0x74f, 0x8, 0x6}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x7f, "d687a42a90"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1f087cd3c1248aed, 0x3, 0x1, 0x30}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0xc8, 0x81, 'G', "d5de03"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1f, 0x4, "1a6ef3f5"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3f, 0x5, "", "be"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x2, 0xb, {0x7, 0x25, 0x1, 0x80, 0x20, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x81, 0x4, "15be"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa4, 0x7, 0x3, "9f2ace52846658"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x4, 0x81, 0x3f, 'l', "aa"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x80, "e44d9223b4"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0xff, 0x4, "10059abf8f0d966f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x4, 0x5, {0x7, 0x25, 0x1, 0x143, 0x2}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x310, 0x7f, 0x3c, 0x9, 0x10, 0x20}, 0x19, &(0x7f0000000d40)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "a559a8afcee52d0ef43b979d02aa65a6"}]}, 0x4, [{0x62, &(0x7f0000000d80)=@string={0x62, 0x3, "6d44eb5c90fb81ca09aa57be11c356d0da8d392ac779fa39a135e54e751c295c4138d0228257e19cd874b99a17cbf5d180314d7a5e59d780ed1ea966e79920fe82647bef39bd0e3cf8dfcd587b51de5fa34c9f4ec676cdd3855c0d8af060d87d"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x425}}]}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x20, 0x0, 0x102, {0x102, 0xd, "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"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000000480)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "3ac2686156816c0d5c0247e1b8a6f05e"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x8, 0xd821}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x4, 0xffff}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x3f, 0x40, "57b48552", "0131370a"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x9, 0xfc, 0x81, 0x80, 0xe4}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000580)={0x4ab92b3afe73702e, 0x10, 0xed, "a865bdce6dfce5a3f34045845077d049997a8e1841493153e2267157fab96bd12ab8004e0c2f8c3d65918a21d3b6bc61e431c55afe2103231c8fef79a605e5a44460eb380e2de49fdfbb9f3c57446b08d726ce688959da7a147c962276532609a5763391b0269287d662745ce1f0c30f582157cb1ae8259c96c12ad6324812318ab7bf73599ff88d12769ed356bf124c8411d855f28614b5c714ec12a5e4dad796dca817a3e213c5c82707b68c5a309862ace5dee500578870a8879031fb422977364733f9942c4fec06856e94d4b322ae80bfc11560fc47965875c962c667b5d712b3664ca71b0bf128b17ead"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xd1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xa0, 0x1, [0xf00f]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x80}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a720"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0xfff8}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "99e3"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xff67}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x40}}) (async) 18:38:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2242.173245][ T2642] xt_limit: Overflow, try lower: 1241513984/7 [ 2242.270154][ T2642] vlan2: entered promiscuous mode [ 2242.282919][ T2642] macvtap0: entered promiscuous mode [ 2242.299747][ T2642] vlan2: entered allmulticast mode [ 2242.330948][ T2642] macvtap0: entered allmulticast mode [ 2242.348157][ T2642] veth0_macvtap: entered allmulticast mode [ 2242.362922][T30559] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2242.401175][ T2642] macvtap0: left allmulticast mode [ 2242.429232][ T2642] veth0_macvtap: left allmulticast mode [ 2242.524235][ T2642] macvtap0: left promiscuous mode [ 2242.773167][T30559] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2242.796240][T30559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.872925][T30559] usb 5-1: config 0 descriptor?? 18:38:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2243.079356][ T2651] xt_limit: Overflow, try lower: 1241513984/7 [ 2243.207472][ T2651] vlan2: entered promiscuous mode [ 2243.282081][ T2651] macvtap0: entered promiscuous mode [ 2243.320504][ T2651] vlan2: entered allmulticast mode [ 2243.356763][ T2651] macvtap0: entered allmulticast mode [ 2243.363041][T30559] ath6kl: Failed to read usb control message: -32 [ 2243.374666][T30559] ath6kl: Unable to read the bmi data from the device: -32 [ 2243.384756][ T2651] veth0_macvtap: entered allmulticast mode [ 2243.417143][T30559] ath6kl: Unable to recv target info: -32 [ 2243.429816][ T2651] macvtap0: left allmulticast mode [ 2243.451186][ T2651] veth0_macvtap: left allmulticast mode [ 2243.479597][ T2651] macvtap0: left promiscuous mode 18:38:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2243.859370][ T2655] xt_limit: Overflow, try lower: 1241513984/7 [ 2243.981561][ T2655] vlan2: entered promiscuous mode [ 2244.006748][ T2655] macvtap0: entered promiscuous mode [ 2244.044452][ T2655] vlan2: entered allmulticast mode [ 2244.063877][ T2656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.091157][ T2655] macvtap0: entered allmulticast mode [ 2244.116574][ T2655] veth0_macvtap: entered allmulticast mode [ 2244.143070][ T2656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.171064][ T2655] macvtap0: left allmulticast mode [ 2244.189090][ T2655] veth0_macvtap: left allmulticast mode [ 2244.206219][ T2655] macvtap0: left promiscuous mode 18:38:13 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x3, 0x58, {0x58, 0x0, "4b48800bbc2a9e9c3d9ff844822600ec756a97f6450e25d24d1ae00a3692ab16964b212e26ed7e27524e890205fd0f26e9e4051e9ce03160ecf8935d7b8bfe491bfef8b45a46d31ce61deca1fd9baa27e7d2334996d8"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0x10, 0xb8, "5a441906bbbb41c623d03c8b15518199e29aa5f552586c2dc9f2b18bf38d1af132d493c22aacb15834f62e051c38e5ae7c49107a7b089f340c45515bab12b781b54c351d68f0c72a1830bb1cbdbf084548d741c9170d407a2d848334d41f7f6a82054a2dce703b985427b5f8e2fb6f3e56838c3366101003c71bcf311b99a6744782eada9a1026657f8d80071764a8f49c1eded3ec1477ff2242acb0c2908833fd4bc582495e4e91e054fd895030356f0eaefff311d10bdb"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x20}}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 64) syz_usb_connect$uac1(0x4, 0x11d, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x3, 0x1, 0x6, 0x50, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x67}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x3, 0x81, 0x81, 0x74, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x6, 0x2, [0x9, 0x5], 0x7}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x8000, 0x5, "35cc4b6f"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x6, 0x1, 0x74f, 0x8, 0x6}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x7f, "d687a42a90"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1f087cd3c1248aed, 0x3, 0x1, 0x30}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0xc8, 0x81, 'G', "d5de03"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1f, 0x4, "1a6ef3f5"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3f, 0x5, "", "be"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x2, 0xb, {0x7, 0x25, 0x1, 0x80, 0x20, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x81, 0x4, "15be"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa4, 0x7, 0x3, "9f2ace52846658"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x4, 0x81, 0x3f, 'l', "aa"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x80, "e44d9223b4"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0xff, 0x4, "10059abf8f0d966f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x4, 0x5, {0x7, 0x25, 0x1, 0x143, 0x2}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x310, 0x7f, 0x3c, 0x9, 0x10, 0x20}, 0x19, &(0x7f0000000d40)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "a559a8afcee52d0ef43b979d02aa65a6"}]}, 0x4, [{0x62, &(0x7f0000000d80)=@string={0x62, 0x3, "6d44eb5c90fb81ca09aa57be11c356d0da8d392ac779fa39a135e54e751c295c4138d0228257e19cd874b99a17cbf5d180314d7a5e59d780ed1ea966e79920fe82647bef39bd0e3cf8dfcd587b51de5fa34c9f4ec676cdd3855c0d8af060d87d"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x425}}]}) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x20, 0x0, 0x102, {0x102, 0xd, "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"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000000480)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "3ac2686156816c0d5c0247e1b8a6f05e"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x8, 0xd821}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x4, 0xffff}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x3f, 0x40, "57b48552", "0131370a"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x9, 0xfc, 0x81, 0x80, 0xe4}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000580)={0x4ab92b3afe73702e, 0x10, 0xed, "a865bdce6dfce5a3f34045845077d049997a8e1841493153e2267157fab96bd12ab8004e0c2f8c3d65918a21d3b6bc61e431c55afe2103231c8fef79a605e5a44460eb380e2de49fdfbb9f3c57446b08d726ce688959da7a147c962276532609a5763391b0269287d662745ce1f0c30f582157cb1ae8259c96c12ad6324812318ab7bf73599ff88d12769ed356bf124c8411d855f28614b5c714ec12a5e4dad796dca817a3e213c5c82707b68c5a309862ace5dee500578870a8879031fb422977364733f9942c4fec06856e94d4b322ae80bfc11560fc47965875c962c667b5d712b3664ca71b0bf128b17ead"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xd1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xa0, 0x1, [0xf00f]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x80}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a720"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0xfff8}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "99e3"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xff67}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x40}}) [ 2244.223768][T30559] ath6kl: Failed to init ath6kl core: -32 [ 2244.455262][T30559] ath6kl_usb: probe of 5-1:0.0 failed with error -32 [ 2244.488834][T30559] usb 5-1: USB disconnect, device number 101 18:38:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x0, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xb, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2244.912781][T30559] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2244.995887][ T2670] hub 9-0:1.0: USB hub found [ 2245.001719][ T2670] hub 9-0:1.0: 8 ports detected 18:38:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:13 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x408a, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) [ 2245.036812][ T2671] xt_limit: Overflow, try lower: 1241513984/7 [ 2245.148588][ T2676] xt_limit: Overflow, try lower: 1241513984/7 [ 2245.170476][ T2669] vlan2: entered promiscuous mode [ 2245.237407][ T2669] macvtap0: entered promiscuous mode [ 2245.280030][ T2669] vlan2: entered allmulticast mode [ 2245.313053][T30559] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2245.331137][T30559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.376579][ T2669] macvtap0: entered allmulticast mode [ 2245.393966][T30559] usb 5-1: config 0 descriptor?? [ 2245.409692][ T2669] veth0_macvtap: entered allmulticast mode [ 2245.461809][ T2669] macvtap0: left allmulticast mode [ 2245.503263][ T2669] veth0_macvtap: left allmulticast mode [ 2245.516295][ T2669] macvtap0: left promiscuous mode 18:38:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2245.744801][T30559] ath6kl: Failed to read usb control message: -32 [ 2245.751527][T30559] ath6kl: Unable to read the bmi data from the device: -32 [ 2245.813639][T30559] ath6kl: Unable to recv target info: -32 [ 2245.945259][ T2690] xt_limit: Overflow, try lower: 1241513984/7 [ 2246.006756][ T2689] xt_limit: Overflow, try lower: 1241513984/7 18:38:14 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000853704081d0620c01507000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "cd8e4e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000c80)={0x2c, &(0x7f00000005c0)={0x40, 0xe, 0xa0, {0xa0, 0xc, "8ad99e0d5903e15ae170102523cd6bbf1d70080e047bf760913ed5c69cd72cc8ab938d56d93ef719046f33de2095f5afcd0cbb92558f9c867c9669f7f4c3aafa52a0079a49ebebac7d53ca8d1c4b49c61ca3413f94ac7ae8144d03697c81228299f6a838faee0ca4628f87cd69b79803445e9537e5a7184a5e654c236e0c743851a948d9946d19ca8b176eb2cbbeb75c3648761d85a1e11f22da387203b1"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000b80)={0x0, 0xf, 0x6f, {0x5, 0xf, 0x6f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc0, 0x7, 0x63}, @generic={0x60, 0x10, 0x4, "15df3482970da9ec14e2aea2dd2c9a9e5e1252242165560465f3fa9c7ca1536807b85f1ebfdd0d31940a33069f8cb4e1604fd8dd96e7a4727d9edd9449cab503e9ef90c7c65b1d127ee4d32a2e31be5152fb01e09cbf971cc9020a1eee"}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0xb6, 0x3, "af90d944", "49aeb529"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x60, 0x0, 0x40, 0x1, 0x0, 0x200, 0x81}}}, &(0x7f0000001100)={0x84, &(0x7f0000000cc0)={0x40, 0x11, 0x72, "030757b2017f1dbc5ac2373201dbbe1689521879dd8cbd0ff92cb84f269f3de5304602009eceb049d840541b9e809522ec65bab54d2543ba6887ac64a650d923879a1c26ed52de3a2ce41c9dc3fc7a31b7e403daabe16a41d68202e49439044f4c95ffd5c1896c58449ef1e30893ffe70094"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000e00)={0x20, 0x0, 0x8, {0x1000, 0x8, [0x0]}}, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0xd5}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "81d3"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000f40)={0x40, 0x13, 0x6}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "d0e5"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x53}}) r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x4d, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x20, 0x21, 0x1f}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x40, 0x19, 0xf9, 0x10, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "716bb5e636ac0a7246503c4a0c35d596"}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42a}}, {0xe8, &(0x7f0000000140)=@string={0xe8, 0x3, "78cca28e2f5fc7ff06f16cca390b1254b2e912b4d28df41e67de9b81c7be6f820c8b0d9245e3ef4215e59eed77ed23984cd87b5514cd5934ef39d98b2bc8f94d28421b98c5efffb9a1ceaed609403ad55d9bf52ed99dc737ac2141b17cfb043cf32e01c2aeb4352348623caa2962ebe1f0eb63e91d039c218ba3d0b52a6c38bc19641a7106bd58e1065ecb74ef7ef7f7250227f5fcc3798f39a6a56ce68925247763071d6d86f201bc0e2f598e0ffdb84dc0373d09c0ebe6f11fb5522a510345024f104bcb1085df0bab27c6866605eeb7d3a938061cbb8c7e173ca636dbf8de446736ad77fe"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="1603e0d7573fa5f595f2"]}, {0xba, &(0x7f0000000340)=@string={0xba, 0x3, "4117579fc07e00cb55e810b8540a28cc0ceb6282674b0315bdab71fad50aa267815791a6157c015fa5675b0129bca22427133768f6ce14c59751e7ef474ae64d8b8269973262abb617f68f2ab5b8c371633491086be546391aa3b617460d384113d7fae7b77f5081614a7d1e629b2cfe88220b0bd6485b57e2ebe5f7bcb7dd374336e0e50444302a8c1731a89a056196cb7252840ac3dae3264133c61ba0c9ed20caab4b3cf66ddfad564fa8bde68b9d74b67e0f7d6cfd5c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, &(0x7f00000004c0)={0x40, 0x4, 0xbc, {0xbc, 0x10, "f6ee6b181aa9a72dd2a190bba2a2dd6755f54e4faef9a8ccff1c1a33df02c06837a3ef808e7497ff31b2df6096616c46f62f57a3154e7408095ec8f12b52f64328af391dfd25b8ac6ed45271b44582aa62f285712f00c948cadf70d9f12ceffd79a31a1c73136585832a2e0dda0e49e37268146401e25e1cc5de7d096a92a5e4ed98100c2ee4991d591580c37754a05c4177f79aeb03b56ae9d40156a9f2737caf76eed38eed570f64468a6f136dc1f882c36cf4a3bb673a0c8a"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="0003bf000000bf036b10cd3d7e53cf33c96d89041a389920298d4afdb040c237629fb868019a410b5dc837faaad2dc581156711bafe6d7f32838df57df4d6d2201ee71381b52071c99ab3ce5be353a5731fd117dd18d2e92ddcf75e5633d1cd19c2a951b20f549484a4edf1a73c61100c639860f1bf0ee311af747329da6645ec0d419e4a7fcd679bdca8eb527d4d1cff0b28b8fdfefcc8128e13deb63b6963777bfc8e89245480c1e2dceb3fbf3cb520a698134672daf9d37112b13cc49a7a06f71acfa1444c0cc2f481fdbfc8ae6a4a76f8c03fc422f397401dbdec8b2"], &(0x7f00000006c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "192080a2"}, @main=@item_012={0x1, 0x0, 0xa, "f5"}, @local=@item_012={0x2, 0x2, 0x2, "d708"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0x54f}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x0, 0x8, 0x49, "c6978904468baaae85f2d79c948f1443cdbc835575e2fae98230fb684fcaa28c0ed4831754f7d97d6fd8fa7bd99429c3dc19b95cf450fbbbac8370a4d1f1e2c97194363aca3365dfb8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000000940)={0x20, 0x1, 0x95, "4843dfb29ca0aa580ca571e2ec3df4833beaa0948441bcbec8ca16b9bdacc52483d26ffdaf87f5a32367e520197003b802113538e66b736408d9665bb2e5c4a0b46e65b76fac35a7cfd17bffa29143463282cd34d71e2f8c995c5f633693d9fcc79405b144c21c4f426f8bca84bc49e2cac99a97d10642b9eb6fce9fde78e871ce1117055a159c0b608cadeb0ac27af397d2318439"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x7}}) [ 2246.097268][T30559] ath6kl: Failed to init ath6kl core: -32 [ 2246.236477][ T2693] vlan2: entered promiscuous mode [ 2246.254106][T30559] ath6kl_usb: probe of 5-1:0.0 failed with error -32 [ 2246.262906][ T2693] macvtap0: entered promiscuous mode [ 2246.298299][ T2693] vlan2: entered allmulticast mode [ 2246.303111][T30559] usb 5-1: USB disconnect, device number 102 [ 2246.322753][ T2693] macvtap0: entered allmulticast mode [ 2246.337231][ T2693] veth0_macvtap: entered allmulticast mode [ 2246.371623][ T2693] macvtap0: left allmulticast mode [ 2246.385619][ T2693] veth0_macvtap: left allmulticast mode [ 2246.400379][ T2693] macvtap0: left promiscuous mode [ 2246.712833][T30559] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2247.143031][T30559] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2247.152189][T30559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.230634][T30559] usb 5-1: config 0 descriptor?? [ 2247.743236][T30559] ath6kl: Unsupported hardware version: 0x0 [ 2247.950548][ T2699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.995233][ T2699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2248.064867][T30559] ath6kl: Failed to init ath6kl core: -22 18:38:16 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc020660b, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2248.242040][ T2708] xt_limit: Overflow, try lower: 1241513984/7 18:38:17 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x0, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2248.345151][T30559] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2248.396637][ T2715] xt_limit: Overflow, try lower: 1241513984/7 [ 2248.408892][T30559] usb 5-1: USB disconnect, device number 103 [ 2248.514570][ T2715] vlan2: entered promiscuous mode 18:38:17 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000853704081d0620c01507000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "cd8e4e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "cd8e4e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000c80)={0x2c, &(0x7f00000005c0)={0x40, 0xe, 0xa0, {0xa0, 0xc, "8ad99e0d5903e15ae170102523cd6bbf1d70080e047bf760913ed5c69cd72cc8ab938d56d93ef719046f33de2095f5afcd0cbb92558f9c867c9669f7f4c3aafa52a0079a49ebebac7d53ca8d1c4b49c61ca3413f94ac7ae8144d03697c81228299f6a838faee0ca4628f87cd69b79803445e9537e5a7184a5e654c236e0c743851a948d9946d19ca8b176eb2cbbeb75c3648761d85a1e11f22da387203b1"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000b80)={0x0, 0xf, 0x6f, {0x5, 0xf, 0x6f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc0, 0x7, 0x63}, @generic={0x60, 0x10, 0x4, "15df3482970da9ec14e2aea2dd2c9a9e5e1252242165560465f3fa9c7ca1536807b85f1ebfdd0d31940a33069f8cb4e1604fd8dd96e7a4727d9edd9449cab503e9ef90c7c65b1d127ee4d32a2e31be5152fb01e09cbf971cc9020a1eee"}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0xb6, 0x3, "af90d944", "49aeb529"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x60, 0x0, 0x40, 0x1, 0x0, 0x200, 0x81}}}, &(0x7f0000001100)={0x84, &(0x7f0000000cc0)={0x40, 0x11, 0x72, "030757b2017f1dbc5ac2373201dbbe1689521879dd8cbd0ff92cb84f269f3de5304602009eceb049d840541b9e809522ec65bab54d2543ba6887ac64a650d923879a1c26ed52de3a2ce41c9dc3fc7a31b7e403daabe16a41d68202e49439044f4c95ffd5c1896c58449ef1e30893ffe70094"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000e00)={0x20, 0x0, 0x8, {0x1000, 0x8, [0x0]}}, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0xd5}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "81d3"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000f40)={0x40, 0x13, 0x6}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "d0e5"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x53}}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x4d, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x20, 0x21, 0x1f}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x40, 0x19, 0xf9, 0x10, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "716bb5e636ac0a7246503c4a0c35d596"}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42a}}, {0xe8, &(0x7f0000000140)=@string={0xe8, 0x3, "78cca28e2f5fc7ff06f16cca390b1254b2e912b4d28df41e67de9b81c7be6f820c8b0d9245e3ef4215e59eed77ed23984cd87b5514cd5934ef39d98b2bc8f94d28421b98c5efffb9a1ceaed609403ad55d9bf52ed99dc737ac2141b17cfb043cf32e01c2aeb4352348623caa2962ebe1f0eb63e91d039c218ba3d0b52a6c38bc19641a7106bd58e1065ecb74ef7ef7f7250227f5fcc3798f39a6a56ce68925247763071d6d86f201bc0e2f598e0ffdb84dc0373d09c0ebe6f11fb5522a510345024f104bcb1085df0bab27c6866605eeb7d3a938061cbb8c7e173ca636dbf8de446736ad77fe"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="1603e0d7573fa5f595f2"]}, {0xba, &(0x7f0000000340)=@string={0xba, 0x3, "4117579fc07e00cb55e810b8540a28cc0ceb6282674b0315bdab71fad50aa267815791a6157c015fa5675b0129bca22427133768f6ce14c59751e7ef474ae64d8b8269973262abb617f68f2ab5b8c371633491086be546391aa3b617460d384113d7fae7b77f5081614a7d1e629b2cfe88220b0bd6485b57e2ebe5f7bcb7dd374336e0e50444302a8c1731a89a056196cb7252840ac3dae3264133c61ba0c9ed20caab4b3cf66ddfad564fa8bde68b9d74b67e0f7d6cfd5c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}]}) (async) r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x4d, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x20, 0x21, 0x1f}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x40, 0x19, 0xf9, 0x10, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "716bb5e636ac0a7246503c4a0c35d596"}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42a}}, {0xe8, &(0x7f0000000140)=@string={0xe8, 0x3, "78cca28e2f5fc7ff06f16cca390b1254b2e912b4d28df41e67de9b81c7be6f820c8b0d9245e3ef4215e59eed77ed23984cd87b5514cd5934ef39d98b2bc8f94d28421b98c5efffb9a1ceaed609403ad55d9bf52ed99dc737ac2141b17cfb043cf32e01c2aeb4352348623caa2962ebe1f0eb63e91d039c218ba3d0b52a6c38bc19641a7106bd58e1065ecb74ef7ef7f7250227f5fcc3798f39a6a56ce68925247763071d6d86f201bc0e2f598e0ffdb84dc0373d09c0ebe6f11fb5522a510345024f104bcb1085df0bab27c6866605eeb7d3a938061cbb8c7e173ca636dbf8de446736ad77fe"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="1603e0d7573fa5f595f2"]}, {0xba, &(0x7f0000000340)=@string={0xba, 0x3, "4117579fc07e00cb55e810b8540a28cc0ceb6282674b0315bdab71fad50aa267815791a6157c015fa5675b0129bca22427133768f6ce14c59751e7ef474ae64d8b8269973262abb617f68f2ab5b8c371633491086be546391aa3b617460d384113d7fae7b77f5081614a7d1e629b2cfe88220b0bd6485b57e2ebe5f7bcb7dd374336e0e50444302a8c1731a89a056196cb7252840ac3dae3264133c61ba0c9ed20caab4b3cf66ddfad564fa8bde68b9d74b67e0f7d6cfd5c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, &(0x7f00000004c0)={0x40, 0x4, 0xbc, {0xbc, 0x10, "f6ee6b181aa9a72dd2a190bba2a2dd6755f54e4faef9a8ccff1c1a33df02c06837a3ef808e7497ff31b2df6096616c46f62f57a3154e7408095ec8f12b52f64328af391dfd25b8ac6ed45271b44582aa62f285712f00c948cadf70d9f12ceffd79a31a1c73136585832a2e0dda0e49e37268146401e25e1cc5de7d096a92a5e4ed98100c2ee4991d591580c37754a05c4177f79aeb03b56ae9d40156a9f2737caf76eed38eed570f64468a6f136dc1f882c36cf4a3bb673a0c8a"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="0003bf000000bf036b10cd3d7e53cf33c96d89041a389920298d4afdb040c237629fb868019a410b5dc837faaad2dc581156711bafe6d7f32838df57df4d6d2201ee71381b52071c99ab3ce5be353a5731fd117dd18d2e92ddcf75e5633d1cd19c2a951b20f549484a4edf1a73c61100c639860f1bf0ee311af747329da6645ec0d419e4a7fcd679bdca8eb527d4d1cff0b28b8fdfefcc8128e13deb63b6963777bfc8e89245480c1e2dceb3fbf3cb520a698134672daf9d37112b13cc49a7a06f71acfa1444c0cc2f481fdbfc8ae6a4a76f8c03fc422f397401dbdec8b2"], &(0x7f00000006c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "192080a2"}, @main=@item_012={0x1, 0x0, 0xa, "f5"}, @local=@item_012={0x2, 0x2, 0x2, "d708"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0x54f}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x0, 0x8, 0x49, "c6978904468baaae85f2d79c948f1443cdbc835575e2fae98230fb684fcaa28c0ed4831754f7d97d6fd8fa7bd99429c3dc19b95cf450fbbbac8370a4d1f1e2c97194363aca3365dfb8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000000940)={0x20, 0x1, 0x95, "4843dfb29ca0aa580ca571e2ec3df4833beaa0948441bcbec8ca16b9bdacc52483d26ffdaf87f5a32367e520197003b802113538e66b736408d9665bb2e5c4a0b46e65b76fac35a7cfd17bffa29143463282cd34d71e2f8c995c5f633693d9fcc79405b144c21c4f426f8bca84bc49e2cac99a97d10642b9eb6fce9fde78e871ce1117055a159c0b608cadeb0ac27af397d2318439"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x7}}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, &(0x7f00000004c0)={0x40, 0x4, 0xbc, {0xbc, 0x10, "f6ee6b181aa9a72dd2a190bba2a2dd6755f54e4faef9a8ccff1c1a33df02c06837a3ef808e7497ff31b2df6096616c46f62f57a3154e7408095ec8f12b52f64328af391dfd25b8ac6ed45271b44582aa62f285712f00c948cadf70d9f12ceffd79a31a1c73136585832a2e0dda0e49e37268146401e25e1cc5de7d096a92a5e4ed98100c2ee4991d591580c37754a05c4177f79aeb03b56ae9d40156a9f2737caf76eed38eed570f64468a6f136dc1f882c36cf4a3bb673a0c8a"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="0003bf000000bf036b10cd3d7e53cf33c96d89041a389920298d4afdb040c237629fb868019a410b5dc837faaad2dc581156711bafe6d7f32838df57df4d6d2201ee71381b52071c99ab3ce5be353a5731fd117dd18d2e92ddcf75e5633d1cd19c2a951b20f549484a4edf1a73c61100c639860f1bf0ee311af747329da6645ec0d419e4a7fcd679bdca8eb527d4d1cff0b28b8fdfefcc8128e13deb63b6963777bfc8e89245480c1e2dceb3fbf3cb520a698134672daf9d37112b13cc49a7a06f71acfa1444c0cc2f481fdbfc8ae6a4a76f8c03fc422f397401dbdec8b2"], &(0x7f00000006c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "192080a2"}, @main=@item_012={0x1, 0x0, 0xa, "f5"}, @local=@item_012={0x2, 0x2, 0x2, "d708"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0x54f}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x0, 0x8, 0x49, "c6978904468baaae85f2d79c948f1443cdbc835575e2fae98230fb684fcaa28c0ed4831754f7d97d6fd8fa7bd99429c3dc19b95cf450fbbbac8370a4d1f1e2c97194363aca3365dfb8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000000940)={0x20, 0x1, 0x95, "4843dfb29ca0aa580ca571e2ec3df4833beaa0948441bcbec8ca16b9bdacc52483d26ffdaf87f5a32367e520197003b802113538e66b736408d9665bb2e5c4a0b46e65b76fac35a7cfd17bffa29143463282cd34d71e2f8c995c5f633693d9fcc79405b144c21c4f426f8bca84bc49e2cac99a97d10642b9eb6fce9fde78e871ce1117055a159c0b608cadeb0ac27af397d2318439"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x7}}) [ 2248.602949][ T2715] macvtap0: entered promiscuous mode [ 2248.613692][ T2715] vlan2: entered allmulticast mode [ 2248.638320][ T2715] macvtap0: entered allmulticast mode [ 2248.669015][ T2715] veth0_macvtap: entered allmulticast mode [ 2248.745182][ T2715] macvtap0: left allmulticast mode [ 2248.772977][ T2715] veth0_macvtap: left allmulticast mode [ 2248.782803][ T2715] macvtap0: left promiscuous mode [ 2248.972964][T30563] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2249.362886][T30563] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2249.379718][T30563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2249.421635][T30563] usb 5-1: config 0 descriptor?? [ 2249.892941][T30563] ath6kl: Unsupported hardware version: 0x0 [ 2250.099903][ T2721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.113291][ T2721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.164289][T30563] ath6kl: Failed to init ath6kl core: -22 [ 2250.248597][T30563] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2250.280771][T30563] usb 5-1: USB disconnect, device number 104 18:38:19 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x0, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2250.584985][ T2736] xt_limit: Overflow, try lower: 1241513984/7 [ 2250.656271][ T2738] hub 9-0:1.0: USB hub found [ 2250.663028][ T2738] hub 9-0:1.0: 8 ports detected [ 2250.681968][ T2736] vlan2: entered promiscuous mode [ 2250.729928][ T2736] macvtap0: entered promiscuous mode [ 2250.749236][ T2736] vlan2: entered allmulticast mode [ 2250.770366][ T2736] macvtap0: entered allmulticast mode [ 2250.792785][ T2736] veth0_macvtap: entered allmulticast mode [ 2250.862491][ T2736] macvtap0: left allmulticast mode [ 2250.882951][ T2736] veth0_macvtap: left allmulticast mode [ 2250.903488][ T2736] macvtap0: left promiscuous mode 18:38:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x4800, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:38:20 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000853704081d0620c01507000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "cd8e4e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000c80)={0x2c, &(0x7f00000005c0)={0x40, 0xe, 0xa0, {0xa0, 0xc, "8ad99e0d5903e15ae170102523cd6bbf1d70080e047bf760913ed5c69cd72cc8ab938d56d93ef719046f33de2095f5afcd0cbb92558f9c867c9669f7f4c3aafa52a0079a49ebebac7d53ca8d1c4b49c61ca3413f94ac7ae8144d03697c81228299f6a838faee0ca4628f87cd69b79803445e9537e5a7184a5e654c236e0c743851a948d9946d19ca8b176eb2cbbeb75c3648761d85a1e11f22da387203b1"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000b80)={0x0, 0xf, 0x6f, {0x5, 0xf, 0x6f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc0, 0x7, 0x63}, @generic={0x60, 0x10, 0x4, "15df3482970da9ec14e2aea2dd2c9a9e5e1252242165560465f3fa9c7ca1536807b85f1ebfdd0d31940a33069f8cb4e1604fd8dd96e7a4727d9edd9449cab503e9ef90c7c65b1d127ee4d32a2e31be5152fb01e09cbf971cc9020a1eee"}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0xb6, 0x3, "af90d944", "49aeb529"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x60, 0x0, 0x40, 0x1, 0x0, 0x200, 0x81}}}, &(0x7f0000001100)={0x84, &(0x7f0000000cc0)={0x40, 0x11, 0x72, "030757b2017f1dbc5ac2373201dbbe1689521879dd8cbd0ff92cb84f269f3de5304602009eceb049d840541b9e809522ec65bab54d2543ba6887ac64a650d923879a1c26ed52de3a2ce41c9dc3fc7a31b7e403daabe16a41d68202e49439044f4c95ffd5c1896c58449ef1e30893ffe70094"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000e00)={0x20, 0x0, 0x8, {0x1000, 0x8, [0x0]}}, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0xd5}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "81d3"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000f40)={0x40, 0x13, 0x6}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "d0e5"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x53}}) r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x4d, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x20, 0x21, 0x1f}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x40, 0x19, 0xf9, 0x10, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "716bb5e636ac0a7246503c4a0c35d596"}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42a}}, {0xe8, &(0x7f0000000140)=@string={0xe8, 0x3, "78cca28e2f5fc7ff06f16cca390b1254b2e912b4d28df41e67de9b81c7be6f820c8b0d9245e3ef4215e59eed77ed23984cd87b5514cd5934ef39d98b2bc8f94d28421b98c5efffb9a1ceaed609403ad55d9bf52ed99dc737ac2141b17cfb043cf32e01c2aeb4352348623caa2962ebe1f0eb63e91d039c218ba3d0b52a6c38bc19641a7106bd58e1065ecb74ef7ef7f7250227f5fcc3798f39a6a56ce68925247763071d6d86f201bc0e2f598e0ffdb84dc0373d09c0ebe6f11fb5522a510345024f104bcb1085df0bab27c6866605eeb7d3a938061cbb8c7e173ca636dbf8de446736ad77fe"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="1603e0d7573fa5f595f2"]}, {0xba, &(0x7f0000000340)=@string={0xba, 0x3, "4117579fc07e00cb55e810b8540a28cc0ceb6282674b0315bdab71fad50aa267815791a6157c015fa5675b0129bca22427133768f6ce14c59751e7ef474ae64d8b8269973262abb617f68f2ab5b8c371633491086be546391aa3b617460d384113d7fae7b77f5081614a7d1e629b2cfe88220b0bd6485b57e2ebe5f7bcb7dd374336e0e50444302a8c1731a89a056196cb7252840ac3dae3264133c61ba0c9ed20caab4b3cf66ddfad564fa8bde68b9d74b67e0f7d6cfd5c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, &(0x7f00000004c0)={0x40, 0x4, 0xbc, {0xbc, 0x10, "f6ee6b181aa9a72dd2a190bba2a2dd6755f54e4faef9a8ccff1c1a33df02c06837a3ef808e7497ff31b2df6096616c46f62f57a3154e7408095ec8f12b52f64328af391dfd25b8ac6ed45271b44582aa62f285712f00c948cadf70d9f12ceffd79a31a1c73136585832a2e0dda0e49e37268146401e25e1cc5de7d096a92a5e4ed98100c2ee4991d591580c37754a05c4177f79aeb03b56ae9d40156a9f2737caf76eed38eed570f64468a6f136dc1f882c36cf4a3bb673a0c8a"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="0003bf000000bf036b10cd3d7e53cf33c96d89041a389920298d4afdb040c237629fb868019a410b5dc837faaad2dc581156711bafe6d7f32838df57df4d6d2201ee71381b52071c99ab3ce5be353a5731fd117dd18d2e92ddcf75e5633d1cd19c2a951b20f549484a4edf1a73c61100c639860f1bf0ee311af747329da6645ec0d419e4a7fcd679bdca8eb527d4d1cff0b28b8fdfefcc8128e13deb63b6963777bfc8e89245480c1e2dceb3fbf3cb520a698134672daf9d37112b13cc49a7a06f71acfa1444c0cc2f481fdbfc8ae6a4a76f8c03fc422f397401dbdec8b2"], &(0x7f00000006c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "192080a2"}, @main=@item_012={0x1, 0x0, 0xa, "f5"}, @local=@item_012={0x2, 0x2, 0x2, "d708"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0x54f}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x0, 0x8, 0x49, "c6978904468baaae85f2d79c948f1443cdbc835575e2fae98230fb684fcaa28c0ed4831754f7d97d6fd8fa7bd99429c3dc19b95cf450fbbbac8370a4d1f1e2c97194363aca3365dfb8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000000940)={0x20, 0x1, 0x95, "4843dfb29ca0aa580ca571e2ec3df4833beaa0948441bcbec8ca16b9bdacc52483d26ffdaf87f5a32367e520197003b802113538e66b736408d9665bb2e5c4a0b46e65b76fac35a7cfd17bffa29143463282cd34d71e2f8c995c5f633693d9fcc79405b144c21c4f426f8bca84bc49e2cac99a97d10642b9eb6fce9fde78e871ce1117055a159c0b608cadeb0ac27af397d2318439"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x7}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000853704081d0620c01507000000010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "cd8e4e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000c80)={0x2c, &(0x7f00000005c0)={0x40, 0xe, 0xa0, {0xa0, 0xc, "8ad99e0d5903e15ae170102523cd6bbf1d70080e047bf760913ed5c69cd72cc8ab938d56d93ef719046f33de2095f5afcd0cbb92558f9c867c9669f7f4c3aafa52a0079a49ebebac7d53ca8d1c4b49c61ca3413f94ac7ae8144d03697c81228299f6a838faee0ca4628f87cd69b79803445e9537e5a7184a5e654c236e0c743851a948d9946d19ca8b176eb2cbbeb75c3648761d85a1e11f22da387203b1"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000b80)={0x0, 0xf, 0x6f, {0x5, 0xf, 0x6f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc0, 0x7, 0x63}, @generic={0x60, 0x10, 0x4, "15df3482970da9ec14e2aea2dd2c9a9e5e1252242165560465f3fa9c7ca1536807b85f1ebfdd0d31940a33069f8cb4e1604fd8dd96e7a4727d9edd9449cab503e9ef90c7c65b1d127ee4d32a2e31be5152fb01e09cbf971cc9020a1eee"}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0xb6, 0x3, "af90d944", "49aeb529"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x60, 0x0, 0x40, 0x1, 0x0, 0x200, 0x81}}}, &(0x7f0000001100)={0x84, &(0x7f0000000cc0)={0x40, 0x11, 0x72, "030757b2017f1dbc5ac2373201dbbe1689521879dd8cbd0ff92cb84f269f3de5304602009eceb049d840541b9e809522ec65bab54d2543ba6887ac64a650d923879a1c26ed52de3a2ce41c9dc3fc7a31b7e403daabe16a41d68202e49439044f4c95ffd5c1896c58449ef1e30893ffe70094"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000e00)={0x20, 0x0, 0x8, {0x1000, 0x8, [0x0]}}, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0xd5}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "81d3"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000f40)={0x40, 0x13, 0x6}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "d0e5"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x53}}) (async) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x4d, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x20, 0x21, 0x1f}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x40, 0x19, 0xf9, 0x10, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "716bb5e636ac0a7246503c4a0c35d596"}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42a}}, {0xe8, &(0x7f0000000140)=@string={0xe8, 0x3, "78cca28e2f5fc7ff06f16cca390b1254b2e912b4d28df41e67de9b81c7be6f820c8b0d9245e3ef4215e59eed77ed23984cd87b5514cd5934ef39d98b2bc8f94d28421b98c5efffb9a1ceaed609403ad55d9bf52ed99dc737ac2141b17cfb043cf32e01c2aeb4352348623caa2962ebe1f0eb63e91d039c218ba3d0b52a6c38bc19641a7106bd58e1065ecb74ef7ef7f7250227f5fcc3798f39a6a56ce68925247763071d6d86f201bc0e2f598e0ffdb84dc0373d09c0ebe6f11fb5522a510345024f104bcb1085df0bab27c6866605eeb7d3a938061cbb8c7e173ca636dbf8de446736ad77fe"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="1603e0d7573fa5f595f2"]}, {0xba, &(0x7f0000000340)=@string={0xba, 0x3, "4117579fc07e00cb55e810b8540a28cc0ceb6282674b0315bdab71fad50aa267815791a6157c015fa5675b0129bca22427133768f6ce14c59751e7ef474ae64d8b8269973262abb617f68f2ab5b8c371633491086be546391aa3b617460d384113d7fae7b77f5081614a7d1e629b2cfe88220b0bd6485b57e2ebe5f7bcb7dd374336e0e50444302a8c1731a89a056196cb7252840ac3dae3264133c61ba0c9ed20caab4b3cf66ddfad564fa8bde68b9d74b67e0f7d6cfd5c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}]}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, &(0x7f00000004c0)={0x40, 0x4, 0xbc, {0xbc, 0x10, "f6ee6b181aa9a72dd2a190bba2a2dd6755f54e4faef9a8ccff1c1a33df02c06837a3ef808e7497ff31b2df6096616c46f62f57a3154e7408095ec8f12b52f64328af391dfd25b8ac6ed45271b44582aa62f285712f00c948cadf70d9f12ceffd79a31a1c73136585832a2e0dda0e49e37268146401e25e1cc5de7d096a92a5e4ed98100c2ee4991d591580c37754a05c4177f79aeb03b56ae9d40156a9f2737caf76eed38eed570f64468a6f136dc1f882c36cf4a3bb673a0c8a"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="0003bf000000bf036b10cd3d7e53cf33c96d89041a389920298d4afdb040c237629fb868019a410b5dc837faaad2dc581156711bafe6d7f32838df57df4d6d2201ee71381b52071c99ab3ce5be353a5731fd117dd18d2e92ddcf75e5633d1cd19c2a951b20f549484a4edf1a73c61100c639860f1bf0ee311af747329da6645ec0d419e4a7fcd679bdca8eb527d4d1cff0b28b8fdfefcc8128e13deb63b6963777bfc8e89245480c1e2dceb3fbf3cb520a698134672daf9d37112b13cc49a7a06f71acfa1444c0cc2f481fdbfc8ae6a4a76f8c03fc422f397401dbdec8b2"], &(0x7f00000006c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "192080a2"}, @main=@item_012={0x1, 0x0, 0xa, "f5"}, @local=@item_012={0x2, 0x2, 0x2, "d708"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0x54f}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x0, 0x8, 0x49, "c6978904468baaae85f2d79c948f1443cdbc835575e2fae98230fb684fcaa28c0ed4831754f7d97d6fd8fa7bd99429c3dc19b95cf450fbbbac8370a4d1f1e2c97194363aca3365dfb8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000000940)={0x20, 0x1, 0x95, "4843dfb29ca0aa580ca571e2ec3df4833beaa0948441bcbec8ca16b9bdacc52483d26ffdaf87f5a32367e520197003b802113538e66b736408d9665bb2e5c4a0b46e65b76fac35a7cfd17bffa29143463282cd34d71e2f8c995c5f633693d9fcc79405b144c21c4f426f8bca84bc49e2cac99a97d10642b9eb6fce9fde78e871ce1117055a159c0b608cadeb0ac27af397d2318439"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x7}}) (async) 18:38:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:20 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x0, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2252.090879][ T2753] xt_limit: Overflow, try lower: 1241513984/7 [ 2252.169070][ T2756] hub 9-0:1.0: USB hub found [ 2252.173583][ T2753] vlan2: entered promiscuous mode [ 2252.181527][ T2756] hub 9-0:1.0: 8 ports detected [ 2252.244137][ T2753] macvtap0: entered promiscuous mode [ 2252.260950][ T2753] vlan2: entered allmulticast mode [ 2252.300678][ T2753] macvtap0: entered allmulticast mode [ 2252.332993][T30563] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2252.355327][ T2753] veth0_macvtap: entered allmulticast mode [ 2252.434237][ T2753] macvtap0: left allmulticast mode [ 2252.464761][ T2753] veth0_macvtap: left allmulticast mode [ 2252.490223][ T2753] macvtap0: left promiscuous mode [ 2252.773195][T30563] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2252.808571][T30563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.899998][T30563] usb 5-1: config 0 descriptor?? [ 2253.403010][T30563] ath6kl: Unsupported hardware version: 0x0 [ 2253.610047][ T2749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.634043][ T2749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2253.677763][ T2749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.772538][ T2749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2253.864595][T30563] ath6kl: Failed to init ath6kl core: -22 [ 2253.967047][T30563] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2254.016300][T30563] usb 5-1: USB disconnect, device number 105 18:38:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:23 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2255.091340][ T2779] xt_limit: Overflow, try lower: 1241513984/7 [ 2255.108735][ T2780] xt_limit: Overflow, try lower: 1241513984/7 [ 2255.246584][ T2777] vlan2: entered promiscuous mode [ 2255.283874][ T2777] macvtap0: entered promiscuous mode [ 2255.331765][ T2777] vlan2: entered allmulticast mode [ 2255.337378][T30563] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2255.352403][ T2784] hub 9-0:1.0: USB hub found [ 2255.367019][ T2784] hub 9-0:1.0: 8 ports detected [ 2255.374865][ T2777] macvtap0: entered allmulticast mode [ 2255.401311][ T2777] veth0_macvtap: entered allmulticast mode [ 2255.450861][ T2777] macvtap0: left allmulticast mode [ 2255.486824][ T2777] veth0_macvtap: left allmulticast mode [ 2255.532717][ T2777] macvtap0: left promiscuous mode [ 2255.552797][T30563] usb 5-1: device descriptor read/64, error 18 18:38:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x7}, 0x8) sendfile(r1, r2, 0x0, 0x20000023896) syz_io_uring_setup(0x3edc, &(0x7f00000000c0)={0x0, 0xff25, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000fa002400128009000100626f001400028006001800040000000500010004000000117ebbeb44468bf51680456bcebde0b551f796513bc230fbdb6e37a2fc7cf06756f5b7a4168e4c965fb9959000"/94], 0x44}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) syz_io_uring_setup(0x3edc, &(0x7f00000000c0)={0x0, 0xff25, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) mknodat$null(r4, &(0x7f00000001c0)='./file0\x00', 0x40, 0x103) 18:38:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2255.832843][T30563] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2255.940749][ T2791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2255.953637][ T2792] xt_limit: Overflow, try lower: 1241513984/7 [ 2256.063086][T30563] usb 5-1: device descriptor read/64, error 18 [ 2256.085815][ T2790] vlan2: entered promiscuous mode [ 2256.115204][ T2790] macvtap0: entered promiscuous mode [ 2256.155011][ T2790] vlan2: entered allmulticast mode [ 2256.183209][ T2790] macvtap0: entered allmulticast mode [ 2256.193139][T30563] usb usb5-port1: attempt power cycle [ 2256.214796][ T2790] veth0_macvtap: entered allmulticast mode [ 2256.264577][ T2790] macvtap0: left allmulticast mode [ 2256.289094][ T2790] veth0_macvtap: left allmulticast mode [ 2256.320593][ T2790] macvtap0: left promiscuous mode [ 2256.624727][T30563] usb 5-1: new high-speed USB device number 108 using dummy_hcd 18:38:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x18, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2256.853326][T30563] usb 5-1: device descriptor read/8, error -61 [ 2256.903280][ T2798] xt_limit: Overflow, try lower: 1241513984/7 [ 2256.971915][ T2798] vlan2: entered promiscuous mode [ 2256.988361][ T2798] macvtap0: entered promiscuous mode [ 2257.021296][ T2798] vlan2: entered allmulticast mode [ 2257.055753][ T2802] hub 9-0:1.0: USB hub found [ 2257.067529][ T2802] hub 9-0:1.0: 8 ports detected [ 2257.074341][ T2798] macvtap0: entered allmulticast mode [ 2257.085357][ T2798] veth0_macvtap: entered allmulticast mode [ 2257.117232][ T2798] macvtap0: left allmulticast mode [ 2257.122762][T30563] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2257.152859][ T2798] veth0_macvtap: left allmulticast mode [ 2257.200469][ T2798] macvtap0: left promiscuous mode [ 2257.353641][T30563] usb 5-1: device descriptor read/8, error -61 [ 2257.482926][T30563] usb usb5-port1: unable to enumerate USB device 18:38:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x4c00, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:38:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x7}, 0x8) sendfile(r1, r2, 0x0, 0x20000023896) (async) syz_io_uring_setup(0x3edc, &(0x7f00000000c0)={0x0, 0xff25, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000fa002400128009000100626f001400028006001800040000000500010004000000117ebbeb44468bf51680456bcebde0b551f796513bc230fbdb6e37a2fc7cf06756f5b7a4168e4c965fb9959000"/94], 0x44}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) syz_io_uring_setup(0x3edc, &(0x7f00000000c0)={0x0, 0xff25, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) mknodat$null(r4, &(0x7f00000001c0)='./file0\x00', 0x40, 0x103) 18:38:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x24, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2258.106667][ T2815] xt_limit: Overflow, try lower: 1241513984/7 [ 2258.120120][ T2816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2258.194568][ T2821] hub 9-0:1.0: USB hub found [ 2258.207069][ T2821] hub 9-0:1.0: 8 ports detected [ 2258.316428][ T2815] vlan2: entered promiscuous mode [ 2258.338158][ T2815] macvtap0: entered promiscuous mode [ 2258.379635][ T2815] vlan2: entered allmulticast mode [ 2258.415520][ T2815] macvtap0: entered allmulticast mode [ 2258.455225][ T2815] veth0_macvtap: entered allmulticast mode [ 2258.507921][ T2815] macvtap0: left allmulticast mode [ 2258.536876][ T2815] veth0_macvtap: left allmulticast mode [ 2258.567357][ T2815] macvtap0: left promiscuous mode 18:38:28 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:38:28 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x7}, 0x8) sendfile(r1, r2, 0x0, 0x20000023896) syz_io_uring_setup(0x3edc, &(0x7f00000000c0)={0x0, 0xff25, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (async) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000fa002400128009000100626f001400028006001800040000000500010004000000117ebbeb44468bf51680456bcebde0b551f796513bc230fbdb6e37a2fc7cf06756f5b7a4168e4c965fb9959000"/94], 0x44}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) (async) syz_io_uring_setup(0x3edc, &(0x7f00000000c0)={0x0, 0xff25, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (async) mknodat$null(r4, &(0x7f00000001c0)='./file0\x00', 0x40, 0x103) 18:38:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x2, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2259.736395][ T2837] xt_limit: Overflow, try lower: 1241513984/7 [ 2259.776423][ T2838] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2259.865828][ T2834] vlan2: entered promiscuous mode [ 2259.890538][ T2834] macvtap0: entered promiscuous mode [ 2259.927659][ T2834] vlan2: entered allmulticast mode [ 2259.933076][ T26] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2259.964279][ T2834] macvtap0: entered allmulticast mode [ 2259.996918][ T2834] veth0_macvtap: entered allmulticast mode [ 2260.069102][ T2834] macvtap0: left allmulticast mode [ 2260.102880][ T2834] veth0_macvtap: left allmulticast mode [ 2260.132802][ T26] usb 5-1: device descriptor read/64, error 18 [ 2260.163640][ T2834] macvtap0: left promiscuous mode 18:38:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2260.402818][ T26] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2260.602795][ T26] usb 5-1: device descriptor read/64, error 18 [ 2260.619696][ T2851] xt_limit: Overflow, try lower: 1241513984/7 [ 2260.722943][ T26] usb usb5-port1: attempt power cycle [ 2260.932456][ T2849] vlan2: entered promiscuous mode [ 2260.956874][ T2849] macvtap0: entered promiscuous mode [ 2260.976903][ T2849] vlan2: entered allmulticast mode [ 2260.995851][ T2849] macvtap0: entered allmulticast mode [ 2261.017602][ T2849] veth0_macvtap: entered allmulticast mode [ 2261.096364][ T2849] macvtap0: left allmulticast mode [ 2261.125871][ T2849] veth0_macvtap: left allmulticast mode [ 2261.132923][ T26] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2261.142773][ T2849] macvtap0: left promiscuous mode 18:38:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x4c, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2261.323396][ T26] usb 5-1: device descriptor read/8, error -61 [ 2261.568324][ T2857] xt_limit: Overflow, try lower: 1241513984/7 [ 2261.602863][ T26] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2261.687086][ T2857] vlan2: entered promiscuous mode [ 2261.702460][ T2857] macvtap0: entered promiscuous mode [ 2261.738576][ T2857] vlan2: entered allmulticast mode [ 2261.766635][ T2857] macvtap0: entered allmulticast mode [ 2261.783017][ T26] usb 5-1: device descriptor read/8, error -61 [ 2261.802269][ T2857] veth0_macvtap: entered allmulticast mode [ 2261.899956][ T2857] macvtap0: left allmulticast mode [ 2261.905543][ T26] usb usb5-port1: unable to enumerate USB device [ 2261.937543][ T2857] veth0_macvtap: left allmulticast mode [ 2261.967180][ T2857] macvtap0: left promiscuous mode 18:38:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2262.296256][ T2860] xt_limit: Overflow, try lower: 1241513984/7 [ 2262.466259][ T2860] vlan2: entered promiscuous mode [ 2262.486479][ T2860] macvtap0: entered promiscuous mode [ 2262.502507][ T2860] vlan2: entered allmulticast mode [ 2262.524576][ T2860] macvtap0: entered allmulticast mode [ 2262.542918][ T2860] veth0_macvtap: entered allmulticast mode [ 2262.572898][ T2860] macvtap0: left allmulticast mode [ 2262.590489][ T2860] veth0_macvtap: left allmulticast mode [ 2262.616288][ T2860] macvtap0: left promiscuous mode 18:38:32 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x5b11, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:38:32 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:38:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x68, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:32 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2264.267252][ T2867] xt_limit: Overflow, try lower: 1241513984/7 [ 2264.391636][ T2867] vlan2: entered promiscuous mode [ 2264.446550][ T2867] macvtap0: entered promiscuous mode [ 2264.482836][T30559] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2264.496767][ T2867] vlan2: entered allmulticast mode [ 2264.547500][ T2867] macvtap0: entered allmulticast mode [ 2264.584119][ T2867] veth0_macvtap: entered allmulticast mode [ 2264.646285][ T2867] macvtap0: left allmulticast mode [ 2264.660176][ T2867] veth0_macvtap: left allmulticast mode [ 2264.702589][ T2867] macvtap0: left promiscuous mode [ 2264.712803][T30559] usb 5-1: device descriptor read/64, error 18 18:38:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x6c, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2265.002881][T30559] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2265.140384][ T2880] xt_limit: Overflow, try lower: 1241513984/7 18:38:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2265.232850][T30559] usb 5-1: device descriptor read/64, error 18 [ 2265.363061][T30559] usb usb5-port1: attempt power cycle [ 2265.426979][ T2879] vlan2: entered promiscuous mode [ 2265.448180][ T2879] macvtap0: entered promiscuous mode [ 2265.471111][ T2879] vlan2: entered allmulticast mode [ 2265.486707][ T2879] macvtap0: entered allmulticast mode [ 2265.533912][ T2879] veth0_macvtap: entered allmulticast mode [ 2265.709556][ T2887] hub 9-0:1.0: USB hub found [ 2265.731363][ T2887] hub 9-0:1.0: 8 ports detected [ 2265.748752][ T2879] macvtap0: left allmulticast mode [ 2265.774570][ T2879] veth0_macvtap: left allmulticast mode [ 2265.783012][T30559] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2265.812612][ T2879] macvtap0: left promiscuous mode 18:38:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x74, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2265.963017][T30559] usb 5-1: device descriptor read/8, error -61 [ 2266.137341][ T2892] xt_limit: Overflow, try lower: 1241513984/7 [ 2266.242779][T30559] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2266.295153][ T2892] vlan2: entered promiscuous mode [ 2266.320710][ T2892] macvtap0: entered promiscuous mode [ 2266.377637][ T2892] vlan2: entered allmulticast mode [ 2266.401124][ T2892] macvtap0: entered allmulticast mode [ 2266.423366][ T2892] veth0_macvtap: entered allmulticast mode [ 2266.443003][T30559] usb 5-1: device descriptor read/8, error -61 [ 2266.463085][ T2892] macvtap0: left allmulticast mode [ 2266.500127][ T2892] veth0_macvtap: left allmulticast mode [ 2266.538395][ T2892] macvtap0: left promiscuous mode [ 2266.562943][T30559] usb usb5-port1: unable to enumerate USB device 18:38:35 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x3, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0x10, 0xe1, {0xe1, 0x4, "6c9078ba537a865aad554bc54d27755ad39b236c328612162137b380d09f216a3cfd1335f92b1024f2b1ab22ef63e96297796fb642ba1686025aa13e275f6f36be36ef18190f128f3fcf03a4219d28747f7be0a208774346a6fbb072fd0aec5f7aa045c4784baeb37ea1d9019b555c0aef960e0c6febb8e8c8f125b8681359df83b83717b6eae212e3b8dcef33bda9f580d192049c17d070c34a610ddae9941e7892142d54694c4778deca0ff6e9938442c7a1267a56e233a9102c4e55deec5f9e99142b3a7f13921a013342589b0fce3a5c6f740842ba14bca7eccdcc8af6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x102f}}, &(0x7f0000000180)=ANY=[@ANYBLOB="0022ab460000050000002389"], &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x20, 0x1, {0x22, 0x9b0}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x13, 0xa8, "60c27f39b72a2aebd32745541f7a8d4a58fc28398afdacb9a3afdb76189cb3dd963aa04d3194b55499f45460b6c907586bf86a7675ec610b736118f5b60dba1ef4460885f23dbff568ee9c5dcf111e9bc0883af81b6206e5fa383e27c3358f68bef3753c2d2bf9ed10ecdd9d9d512582b9a8bd002e399a2d20c3434a7ad0ad3ed225388bba699151b87aedec70b4fc9df84bf8b3ee7cfa0b36943e5735eb4fee6a7bef0147a330bf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000380)={0x20, 0x1, 0x63, "845784f803dad83098d59f495fa12ffacf45299ac7ab3d744e6162d5ff58419958cbd06cc68816fb43266db87e0eaa27277d716f2fddc4a5764dc0cbbc882bf6d99c02adc4284dcf855946a888b69e61b1444a218b7d5b926ce8d1c382ac2695525f77"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xf0}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 18:38:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x7a, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:36 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0xd42, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x72, 0xb3, 0x65, 0x0, 0x3f0, 0x1f1d, 0xe316, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd30, 0x4, 0x5, 0x80, 0x80, 0x4, [{{0x9, 0x4, 0x3, 0x2, 0xf, 0xfb, 0x69, 0x4d, 0x5, [@hid_hid={0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xf10}}], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x86, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xf5e6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x7f, 0x57, 0x3f, [@generic={0x87, 0xa, "396dc8e2f720d0a79ba55598ca8b7241fc30ca855ec7137e0a0c079059078881f7ba4850d689825a14a44f42de6d5543427c202938f54979d96bb0273b7f03a0c50c936bdaae9f44a0030fdaafe4f2349e870843d85706ff41bb3fd2f0b83d36c8ea6423708e93c16bad91d8fd1d0beb2bbc53d7ca32011e919c05b8d8a5662e96e4d33ccb"}, @generic={0x13, 0x31, "4e9a30e676d81a2116124086a5a047ef3a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x8, 0x2, 0x40, [@generic={0x8c, 0x30, "75a0f30adfa3bb9f0e971add8f132ed665681b14c540869157c3fcb7a2cd84c3036cdf96d6ada0b12635d42e81c2ec860cb099548816b0d3ffe4907a0ee14ee07ab76c0f3614000ed3a048e95e984c67c2ea04be796da0754b6d10a2a228464bdb20bd482fc1ec64241e0b73acec7141da371b2d3614b59686704a1fedcb09b45d41be0988f3613ad578"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x1, 0xd6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x9a, 0x1f, 0xff, [@generic={0x1f, 0x6, "3b8999f25890b4d4082038fac6b6a81e9b3a2bea2597c30ad3f902f077"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x7, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x7, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x7c}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x2, 0x3f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xe5, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x7, 0x1000}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x70, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4, 0x5}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x4, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x5b2}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x0, 0xff, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x9}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x5, 0x1, 0x1, [@generic={0x65, 0x7, "1f6faf4c54edabfc60ca33a573a2b424e717c039c951ee49eeecae0604c6b68ea4ab8eb6daa889640f73b815cae97063f22cd3e605906c8613dd4b54fb31af283be7195595d7560c999a361dc67693760e5353d971eb868a9b02ff702a29ee87010e1a"}]}}]}}, {{0x9, 0x4, 0x3b, 0x8, 0xc, 0xe8, 0x3b, 0x99, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x751, 0x2c}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x8b8, 0x7, "17d3"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x4, 0xa, 0x8, 0xa], 0x81}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x6, "d50a"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x3, 0x2, 0x12], 0x81}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x81, 'PD'}]}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x20, 0x1, [@generic={0xa4, 0x6, "5b7d28c5f35fcf2fade1b061112aad3bf20a0f2e0741052f88b33bc13f4cdafd3e2d27df4d6288af91fc10c1686d29aa9862a6a3257699e245b276ff601696cf5f533a3c4ab531fb576e043faab486c2b04b1d7f6022fac3d7a20edb945374cc52f8894d81474b23cd852d039846fc3a2363162a73050d439158147185e96715a026acb9bfa3255016ec988cda88f9a666c56d2cb3ccb24c3f4338113e14435496e9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x5, 0x3, 0x3f, [@generic={0x41, 0xd, "64af8e94a1d08fde12475888f23b1167589f64f977ffe8cb86858781e51226ccfc6829e6815a176abc85ccc3a166c1b91bc6d42ea5abe7a1c8154f91e2c335"}, @generic={0x72, 0xb, "523a67e2b551f91fa2cf865c7e2c3a9020a96a8e0e1279be7b5b2eb12be97e6e67b3ef8f212544e71817b476f980e9bec76c34e0393c0d3459ff1e224655262f152b000632527f0e234f459e816b4c5094a5e635ebec3336d5f6fa50d0703d45f85bc90743614bdd26f233d1ae69872d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7f, 0x4e, 0x0, [@generic={0xb8, 0xe, "ecdffe017ac4e22dbc7532e75bf417ee3ee9efa4efd7a464555255050b9ad335cc42547bd0e9f3f84b429830f552e5f2a3efba6eb13a44fe2ed3bf310e986cb3bfacc9e675802f71ae0c2cc88028b22867d88e923e344e8f10809b02e05143f2e92d0d76cb199a3534ffd012829ce7184c3f8b5b2ccd0070bf22599ffb887f45beb33be8840ef7ab3c33e512e5a815d59d3b31bf8f3e7c2e542e9238f692392a1a72fa83395e8dee157f1332c4236ad95ddfb57511c0"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x902a}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xfc, 0x8, 0x1, [@generic={0x72, 0x21, "68c896a7ccb62199bd743ffd08836a16a61625cb80f45dc209c64ac4821a7e6bd24f670ed9c2d91dd3bdc210e9fe39547e656f863513727405a8fc9c4f8f296eb0fea9d24f970c28fe647e35aaadd01bfe9eb246140a849ed2d0d8b7cc6697d30699668c5f1526b9b941b0c24f815e6a"}]}}, {{0x9, 0x5, 0xe, 0xbe5921e002a34e60, 0x8, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0xff, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8, 0x7f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x4c9}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x1, 0x7, 0x4, [@generic={0xfb, 0x6, "effd76bfec896afd0eb6bd96b43a75111e76c80e595befaab8066a9f08245d082a924a5a18b61ddaf0429a9f5c8b62b906c1dbfc331dbf0b3a514fe0e1317ead36de8107e5d733406d19aaf715edab4c680e0b3ee2cc3085ec1b67daf278658ed9da08e676b6e2a9ab7576599285e4e53fb7b9e4eedc66c1480ccf919bf62006107956a3dc3eae2a88bbfe2fe8b9f91ea15434cccc630e03784a95a1833c77fdc820116dbbeca38a399545f32214302de38ff4a1a814331395b03f8ae228f1ab04e84c153e7460ef18feabbf34e033824c18dc4a19259b394ce3f1f13b2ef62b795df4cbf6f6d219ca7905c056f5c75635cace9ad7a92c6878"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x80, 0x3, 0x40, [@generic={0xe, 0x6, "2cf3049ea9956bd49dd182f8"}, @generic={0x6a, 0x31, "9e7cd7aa8876e225adda399c3a057ed58007eccebb2b1387ba187788fd34ced09bf646e3dfb7ab83c0c11ce06da0aa2a18d288a64f4b0358edb74201522767f6aec6a9869fe1e3fff3dbc918baf757b4bd61e08a2bf6ebb7bdce3a6d46b8133877bb2212e95bfba4"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xfa, 0x48, 0x1, [@generic={0x7f, 0xa, "65104163287eb26451a610f07ff4566d68810eaf79492b3808ca09554475fee4d04e721ab66c99ea8f4d6139a7829f5281970c756bd542b8af3fac96334162f19922fb46626232e85d8b6510edae3dc8fe23e70d8e9ec2aa9268533b89b1c6df9c21e7b10998a7b8275d99050f8c904c167bf124586c8272b96ec16db1"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x9a, 0xb6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x8001}]}}]}}, {{0x9, 0x4, 0x88, 0x4, 0x8, 0xd5, 0xb2, 0xc5, 0x2, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e0821aeb77"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x45, 0x4, 0x1c, 0x1f}, {0x6, 0x24, 0x1a, 0x4, 0x30}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0xbd, 0x24, 0x13, 0x1f, "cc12229aaa67fffbbd92fa61e93ac3fc23bd43f173418bf74abb877790d9e6ef4f63548b84e7c62e08afe2c75a56a29289c24270a4dfa46831c6881ebfe4caf75bf9ffd930dbe2769bd41119269cc8aaae5e81d83a81803e23962886f72ac008a445ca49d40052f2d375db2396ab592e2872053d42b5d258d9eca2315196393a9dbf3acba9ec02520f27fdede94d328c8641720dfeda3567b8b0f82d26612a8107b021210c757cb96845f994056c16f212d6a9e10be88e3cc6"}, @country_functional={0xa, 0x24, 0x7, 0x8, 0xfffa, [0x0, 0x3]}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x2, 0xc4, 0x1, 0x1000, 0x4}]}, @generic={0x20, 0x31, "fe0b2d8dbfd372b8bba45fe1da6e9a70c80d0ce3ba98f13d3fb082b2847d"}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x5, 0x0, 0x80, [@generic={0xd2, 0xd, "381a1a0890f94905c3a0b904c4711fced5b4cc52a5f9c4ab05cc7268b9068c682c6c65943c7a703300d8a661526685de713f900ccf6fada4771b832d8b17ff380a41b10c0e459a67f78e5e71442f9ef02d5253d28cc37d02d215243634e65c739d01cf598c1d76e91f2eddba0b3722607b68f4aa634aa283459a9a9cae7f0129737a6e72950850764fb7bddd6ed9363a058888dea4f267e37dd30a77dbc938eb574be90fae75a3afc61ef1d0b2cabcc8aa03d00f31f4d9340e5631d27d63111cab8b792dcd50d9d00b9f36e17b01cde6"}, @generic={0xd9, 0x3, "6d5a29f1c8b39663c0ec65d58468b1b8aae704db052668ac72ab85d9a4f2a6d5ea7aeb73fe3dfc54284a8714ccadec88d6a2e96c7d184bfc6929a46f5e2417c6b7b388c47b2b6e1209794f9c29d46ec7b639ee3f7bdca036d02c67222637dc5a6dc4d4c91f9558f81ffd37dbc757e73d7d5d0ad290dfa3831fd16fbabbf10df4bd9a20e733879f43cfd1bb859914e13ce69d0c7f3034bf8d4f80776a2d9e379c86e7d88b198d105de1fba618408bd099ae05a33fe178c9d629c56c41e7712be622a8e5e550731679efd8e161cb4623b97ab70ea7371595"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x80}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x6, 0x0, 0x3, [@generic={0x40, 0xd, "e1b352ec36a2ee4d88b426787bfe5985a812706b4f27505f556814ea127b23788928fd172819c977a79121233444387af6c41240d96984f0793bb63c4496"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6f, 0x6, 0x1, [@generic={0x44, 0x31, "39d900b304f6d095769fe559535574f89c24617f5dc0e6085905c685bd9cecfab415b4e59ed238742c492bf29f6c829d72077688ee2f47b431322e56e0b0d318dad1"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x9, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6c, 0x7ff}, @generic={0xa7, 0x23, "5ee96156146f43373f8173c46c921ccb3a1af29e404a9700655d585cedba44003f07cab1c283e010d7fca4b987a4db8c1a0410223f3dbb29f75cfe8b498fecdf61c90614643756287937d2d183e9d6cba8f8675c9a96a98b212fd87e17bb63ad423cf0bb5546546b5e6a2b4ad1f3a7d3c04ef72d1cd67a658d4c0e2d2e9555259fdd0543a93825cbcaad831e3b1b11c7665fee48394d36ed25771ff79880a325f36c1961d7"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0xff, 0x6, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3b7, 0x2, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x20, 0x81, 0x97, [@generic={0x64, 0x11, "7cf20a4460aaad2d5604b204a009337e90d301b4cfb830ffd16534935ac8332b8824173899725c29037ef74c40c58c4ddff75b32bf7423ef42a78ce942b8e61e52c24df10058696167986cfdcbc5e2b422174111789e2906025ad151ee43723fa441"}]}}]}}, {{0x9, 0x4, 0x9e, 0x9, 0x1, 0xa0, 0xa5, 0xf7, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "16"}, {0x5, 0x24, 0x0, 0x976}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5b20, 0x56, 0x9f}, {0x6, 0x24, 0x1a, 0x4, 0x14}, [@obex={0x5, 0x24, 0x15, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x1, [0x15c]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x80, 0xbe, 0x7f}, @mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x94, 0x1, 0x91}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0xb, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x5}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x20, 0x7, 0xff, 0xd1}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x6, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x170, 0xf00, 0x3, [0x3f07, 0xc0]}]}, 0x5, [{0x1f, &(0x7f0000000080)=@string={0x1f, 0x3, "80547d6405fab878dc83073e1a7fa2043bc10428260da6e5378f709062"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xf3, &(0x7f0000000140)=@string={0xf3, 0x3, "5e79baf7b6464659ab710b90bc5bb032e2ad2def9b76463c48580a9aebcb0885fe6ea8e5dba1d5fb44c6ccbda9283d5fb0e0b5d6ea0dc0022debfe1747f1497e06209fb21d0cce032c58617a5d3ff2f60f5d8c13bf623bc3f3918427f694e043108514f320bd3b78571853ae741035718aae2f73d993b03bff85ba32bf9052a9f49f28a65441ff66d3d9a34177a39fcc0ac3fe519e67dbc7b1ad656bac37b5e472646539951525c457ff7c999c8ecbeb5ac00bf4f164bdd65bf9fe9656041e5de9f144430bb5e065caa22f67dca085089d58cd508d6bb8d7d6ca658b1afc1d3edb13666ce2bafe2fb333fa690f4000cb65"}}, {0x87, &(0x7f0000000240)=@string={0x87, 0x3, "bb0bef669942cf4aa6eefb508155a84d6d6ec8fc95fe8a7984aaac4fc385c7543106e861d59ddbcaa6a35275ce3bb5873e19225084749763fac28722842df0989af841aa86f6a613ea5ff7e99a91417556d358b2835fcaa6c8bb4ca33f3f7daac5010edba78df3e70d1c1af46c1de43a845d72f4d9213e4eb24405cf8bcd50fcd9416fddc6"}}, {0x1b, &(0x7f0000000340)=@string={0x1b, 0x3, "1d1acbf45acd7ddc3f404858c768faf17fc8e9ca3f5525e436"}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0x7, 0xf9, {0xf9, 0x4, "651260d5f94ead9610834d742f5181361e3d514c611668ad981eab9ae80398e360638a37fb58b45211b5b241bdb900d80d486ed2155180d3c36e10131b83f4df18731e4ab22ebc17c7c98336735289885d8ee1a8115808ef3bca72ea5815ac849c88ad81aac41b5ddf69f247a1bf71ce5d6f443e3032bf085fabaf0fccbf8ef0c9ef10e551c6d91a2edbc1d6a084e3f2d1d8f1fb69f47a00fe07342fb31a9b46e647face39f706dd212a02d2d8d09354327e5a2cc2b41ac65d37f5c3f01fad80e6384a4f973ffec7225bb95b81c1a6cbff730c09563842737771a8f1d2d48536aa84a1f45fd8cdfb80cb44da3ede6c2b46700f5a437085"}}, &(0x7f0000000500)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "f4e86349da07516a47ae5c682cfabf58247c9c50be8c08f5b63d5e32aa04a30aafa8a8998acdb26181d3a116dc0cf73f4a24021d9d92231a89a54d537bb80af341238dda7b4fbf1271e25b43d1140c78efe235a244842056ff96a1217c005e985c38a98804f72a6f73fdb2c9fa30bbd7a82f70a68233deb29f08ad0ca22375a727068914fec44be5c339d018d6af381bc8a395585555090c0390a2"}}, &(0x7f00000005c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x0, 0x80, 0x20, "a0bd3448", "777040a0"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0xff, 0x5, 0x7f, 0x7ff, 0x3f}}}, &(0x7f0000001900)={0x84, &(0x7f00000006c0)={0x20, 0x0, 0x2d, "51978b5457c2678dc2419bae9690f08b1117d7158f13c5280627226402c30bd6cdee5e8661a3c885113543b597"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xbe}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0xc0, 0x20}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0x1f}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "c656"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001740)={0x40, 0x13, 0x6, @random="da4012d1090d"}, &(0x7f0000001780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000017c0)={0x40, 0x19, 0x2, 'Td'}, &(0x7f0000001800)={0x40, 0x1a, 0x2}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0xb5}, &(0x7f0000001880)={0x40, 0x1e, 0x1}, &(0x7f00000018c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2267.580705][ T2902] xt_limit: Overflow, try lower: 1241513984/7 [ 2267.742272][ T2898] vlan2: entered promiscuous mode [ 2267.753114][ T2898] macvtap0: entered promiscuous mode [ 2267.774048][ T2898] vlan2: entered allmulticast mode [ 2267.784108][ T5178] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2267.812906][ T2898] macvtap0: entered allmulticast mode [ 2267.851585][ T2898] veth0_macvtap: entered allmulticast mode [ 2267.886929][ T2898] macvtap0: left allmulticast mode [ 2267.929007][ T2898] veth0_macvtap: left allmulticast mode [ 2267.963302][ T2898] macvtap0: left promiscuous mode [ 2268.042988][T24746] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2268.163083][ T5178] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2268.184424][ T5178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.253596][ T5178] usb 5-1: config 0 descriptor?? [ 2268.293000][T24746] usb 4-1: Using ep0 maxpacket: 8 18:38:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xb4, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2268.503018][T24746] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 2268.520665][ T2909] xt_limit: Overflow, try lower: 1241513984/7 [ 2268.540006][T24746] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 2268.592776][T24746] usb 4-1: Product: syz [ 2268.670024][ T2909] vlan2: entered promiscuous mode [ 2268.687854][T24746] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2268.703465][ T2909] macvtap0: entered promiscuous mode [ 2268.728312][ T2900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2268.740397][ T2909] vlan2: entered allmulticast mode [ 2268.756540][ T2900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2268.769240][ T2909] macvtap0: entered allmulticast mode [ 2268.797734][ T2909] veth0_macvtap: entered allmulticast mode [ 2268.817920][ T2909] macvtap0: left allmulticast mode [ 2268.826078][ T5178] ath6kl: Unsupported hardware version: 0x0 [ 2268.863097][ T2909] veth0_macvtap: left allmulticast mode [ 2268.868951][ T2909] macvtap0: left promiscuous mode [ 2269.046715][ T5178] ath6kl: Failed to init ath6kl core: -22 [ 2269.154218][ T5178] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2269.181583][ T5178] usb 5-1: USB disconnect, device number 118 18:38:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xbc, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:39 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x2, 0xd42, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x72, 0xb3, 0x65, 0x0, 0x3f0, 0x1f1d, 0xe316, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd30, 0x4, 0x5, 0x80, 0x80, 0x4, [{{0x9, 0x4, 0x3, 0x2, 0xf, 0xfb, 0x69, 0x4d, 0x5, [@hid_hid={0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xf10}}], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x86, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xf5e6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x7f, 0x57, 0x3f, [@generic={0x87, 0xa, "396dc8e2f720d0a79ba55598ca8b7241fc30ca855ec7137e0a0c079059078881f7ba4850d689825a14a44f42de6d5543427c202938f54979d96bb0273b7f03a0c50c936bdaae9f44a0030fdaafe4f2349e870843d85706ff41bb3fd2f0b83d36c8ea6423708e93c16bad91d8fd1d0beb2bbc53d7ca32011e919c05b8d8a5662e96e4d33ccb"}, @generic={0x13, 0x31, "4e9a30e676d81a2116124086a5a047ef3a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x8, 0x2, 0x40, [@generic={0x8c, 0x30, "75a0f30adfa3bb9f0e971add8f132ed665681b14c540869157c3fcb7a2cd84c3036cdf96d6ada0b12635d42e81c2ec860cb099548816b0d3ffe4907a0ee14ee07ab76c0f3614000ed3a048e95e984c67c2ea04be796da0754b6d10a2a228464bdb20bd482fc1ec64241e0b73acec7141da371b2d3614b59686704a1fedcb09b45d41be0988f3613ad578"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x1, 0xd6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x9a, 0x1f, 0xff, [@generic={0x1f, 0x6, "3b8999f25890b4d4082038fac6b6a81e9b3a2bea2597c30ad3f902f077"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x7, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x7, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x7c}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x2, 0x3f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xe5, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x7, 0x1000}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x70, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4, 0x5}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x4, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x5b2}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x0, 0xff, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x9}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x5, 0x1, 0x1, [@generic={0x65, 0x7, "1f6faf4c54edabfc60ca33a573a2b424e717c039c951ee49eeecae0604c6b68ea4ab8eb6daa889640f73b815cae97063f22cd3e605906c8613dd4b54fb31af283be7195595d7560c999a361dc67693760e5353d971eb868a9b02ff702a29ee87010e1a"}]}}]}}, {{0x9, 0x4, 0x3b, 0x8, 0xc, 0xe8, 0x3b, 0x99, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x751, 0x2c}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x8b8, 0x7, "17d3"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x4, 0xa, 0x8, 0xa], 0x81}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x6, "d50a"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x3, 0x2, 0x12], 0x81}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x81, 'PD'}]}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x20, 0x1, [@generic={0xa4, 0x6, "5b7d28c5f35fcf2fade1b061112aad3bf20a0f2e0741052f88b33bc13f4cdafd3e2d27df4d6288af91fc10c1686d29aa9862a6a3257699e245b276ff601696cf5f533a3c4ab531fb576e043faab486c2b04b1d7f6022fac3d7a20edb945374cc52f8894d81474b23cd852d039846fc3a2363162a73050d439158147185e96715a026acb9bfa3255016ec988cda88f9a666c56d2cb3ccb24c3f4338113e14435496e9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x5, 0x3, 0x3f, [@generic={0x41, 0xd, "64af8e94a1d08fde12475888f23b1167589f64f977ffe8cb86858781e51226ccfc6829e6815a176abc85ccc3a166c1b91bc6d42ea5abe7a1c8154f91e2c335"}, @generic={0x72, 0xb, "523a67e2b551f91fa2cf865c7e2c3a9020a96a8e0e1279be7b5b2eb12be97e6e67b3ef8f212544e71817b476f980e9bec76c34e0393c0d3459ff1e224655262f152b000632527f0e234f459e816b4c5094a5e635ebec3336d5f6fa50d0703d45f85bc90743614bdd26f233d1ae69872d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7f, 0x4e, 0x0, [@generic={0xb8, 0xe, "ecdffe017ac4e22dbc7532e75bf417ee3ee9efa4efd7a464555255050b9ad335cc42547bd0e9f3f84b429830f552e5f2a3efba6eb13a44fe2ed3bf310e986cb3bfacc9e675802f71ae0c2cc88028b22867d88e923e344e8f10809b02e05143f2e92d0d76cb199a3534ffd012829ce7184c3f8b5b2ccd0070bf22599ffb887f45beb33be8840ef7ab3c33e512e5a815d59d3b31bf8f3e7c2e542e9238f692392a1a72fa83395e8dee157f1332c4236ad95ddfb57511c0"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x902a}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xfc, 0x8, 0x1, [@generic={0x72, 0x21, "68c896a7ccb62199bd743ffd08836a16a61625cb80f45dc209c64ac4821a7e6bd24f670ed9c2d91dd3bdc210e9fe39547e656f863513727405a8fc9c4f8f296eb0fea9d24f970c28fe647e35aaadd01bfe9eb246140a849ed2d0d8b7cc6697d30699668c5f1526b9b941b0c24f815e6a"}]}}, {{0x9, 0x5, 0xe, 0xbe5921e002a34e60, 0x8, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0xff, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8, 0x7f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x4c9}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x1, 0x7, 0x4, [@generic={0xfb, 0x6, "effd76bfec896afd0eb6bd96b43a75111e76c80e595befaab8066a9f08245d082a924a5a18b61ddaf0429a9f5c8b62b906c1dbfc331dbf0b3a514fe0e1317ead36de8107e5d733406d19aaf715edab4c680e0b3ee2cc3085ec1b67daf278658ed9da08e676b6e2a9ab7576599285e4e53fb7b9e4eedc66c1480ccf919bf62006107956a3dc3eae2a88bbfe2fe8b9f91ea15434cccc630e03784a95a1833c77fdc820116dbbeca38a399545f32214302de38ff4a1a814331395b03f8ae228f1ab04e84c153e7460ef18feabbf34e033824c18dc4a19259b394ce3f1f13b2ef62b795df4cbf6f6d219ca7905c056f5c75635cace9ad7a92c6878"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x80, 0x3, 0x40, [@generic={0xe, 0x6, "2cf3049ea9956bd49dd182f8"}, @generic={0x6a, 0x31, "9e7cd7aa8876e225adda399c3a057ed58007eccebb2b1387ba187788fd34ced09bf646e3dfb7ab83c0c11ce06da0aa2a18d288a64f4b0358edb74201522767f6aec6a9869fe1e3fff3dbc918baf757b4bd61e08a2bf6ebb7bdce3a6d46b8133877bb2212e95bfba4"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xfa, 0x48, 0x1, [@generic={0x7f, 0xa, "65104163287eb26451a610f07ff4566d68810eaf79492b3808ca09554475fee4d04e721ab66c99ea8f4d6139a7829f5281970c756bd542b8af3fac96334162f19922fb46626232e85d8b6510edae3dc8fe23e70d8e9ec2aa9268533b89b1c6df9c21e7b10998a7b8275d99050f8c904c167bf124586c8272b96ec16db1"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x9a, 0xb6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x8001}]}}]}}, {{0x9, 0x4, 0x88, 0x4, 0x8, 0xd5, 0xb2, 0xc5, 0x2, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e0821aeb77"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x45, 0x4, 0x1c, 0x1f}, {0x6, 0x24, 0x1a, 0x4, 0x30}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0xbd, 0x24, 0x13, 0x1f, "cc12229aaa67fffbbd92fa61e93ac3fc23bd43f173418bf74abb877790d9e6ef4f63548b84e7c62e08afe2c75a56a29289c24270a4dfa46831c6881ebfe4caf75bf9ffd930dbe2769bd41119269cc8aaae5e81d83a81803e23962886f72ac008a445ca49d40052f2d375db2396ab592e2872053d42b5d258d9eca2315196393a9dbf3acba9ec02520f27fdede94d328c8641720dfeda3567b8b0f82d26612a8107b021210c757cb96845f994056c16f212d6a9e10be88e3cc6"}, @country_functional={0xa, 0x24, 0x7, 0x8, 0xfffa, [0x0, 0x3]}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x2, 0xc4, 0x1, 0x1000, 0x4}]}, @generic={0x20, 0x31, "fe0b2d8dbfd372b8bba45fe1da6e9a70c80d0ce3ba98f13d3fb082b2847d"}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x5, 0x0, 0x80, [@generic={0xd2, 0xd, "381a1a0890f94905c3a0b904c4711fced5b4cc52a5f9c4ab05cc7268b9068c682c6c65943c7a703300d8a661526685de713f900ccf6fada4771b832d8b17ff380a41b10c0e459a67f78e5e71442f9ef02d5253d28cc37d02d215243634e65c739d01cf598c1d76e91f2eddba0b3722607b68f4aa634aa283459a9a9cae7f0129737a6e72950850764fb7bddd6ed9363a058888dea4f267e37dd30a77dbc938eb574be90fae75a3afc61ef1d0b2cabcc8aa03d00f31f4d9340e5631d27d63111cab8b792dcd50d9d00b9f36e17b01cde6"}, @generic={0xd9, 0x3, "6d5a29f1c8b39663c0ec65d58468b1b8aae704db052668ac72ab85d9a4f2a6d5ea7aeb73fe3dfc54284a8714ccadec88d6a2e96c7d184bfc6929a46f5e2417c6b7b388c47b2b6e1209794f9c29d46ec7b639ee3f7bdca036d02c67222637dc5a6dc4d4c91f9558f81ffd37dbc757e73d7d5d0ad290dfa3831fd16fbabbf10df4bd9a20e733879f43cfd1bb859914e13ce69d0c7f3034bf8d4f80776a2d9e379c86e7d88b198d105de1fba618408bd099ae05a33fe178c9d629c56c41e7712be622a8e5e550731679efd8e161cb4623b97ab70ea7371595"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x80}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x6, 0x0, 0x3, [@generic={0x40, 0xd, "e1b352ec36a2ee4d88b426787bfe5985a812706b4f27505f556814ea127b23788928fd172819c977a79121233444387af6c41240d96984f0793bb63c4496"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6f, 0x6, 0x1, [@generic={0x44, 0x31, "39d900b304f6d095769fe559535574f89c24617f5dc0e6085905c685bd9cecfab415b4e59ed238742c492bf29f6c829d72077688ee2f47b431322e56e0b0d318dad1"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x9, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6c, 0x7ff}, @generic={0xa7, 0x23, "5ee96156146f43373f8173c46c921ccb3a1af29e404a9700655d585cedba44003f07cab1c283e010d7fca4b987a4db8c1a0410223f3dbb29f75cfe8b498fecdf61c90614643756287937d2d183e9d6cba8f8675c9a96a98b212fd87e17bb63ad423cf0bb5546546b5e6a2b4ad1f3a7d3c04ef72d1cd67a658d4c0e2d2e9555259fdd0543a93825cbcaad831e3b1b11c7665fee48394d36ed25771ff79880a325f36c1961d7"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0xff, 0x6, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3b7, 0x2, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x20, 0x81, 0x97, [@generic={0x64, 0x11, "7cf20a4460aaad2d5604b204a009337e90d301b4cfb830ffd16534935ac8332b8824173899725c29037ef74c40c58c4ddff75b32bf7423ef42a78ce942b8e61e52c24df10058696167986cfdcbc5e2b422174111789e2906025ad151ee43723fa441"}]}}]}}, {{0x9, 0x4, 0x9e, 0x9, 0x1, 0xa0, 0xa5, 0xf7, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "16"}, {0x5, 0x24, 0x0, 0x976}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5b20, 0x56, 0x9f}, {0x6, 0x24, 0x1a, 0x4, 0x14}, [@obex={0x5, 0x24, 0x15, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x1, [0x15c]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x80, 0xbe, 0x7f}, @mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x94, 0x1, 0x91}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0xb, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x5}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x20, 0x7, 0xff, 0xd1}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x6, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x170, 0xf00, 0x3, [0x3f07, 0xc0]}]}, 0x5, [{0x1f, &(0x7f0000000080)=@string={0x1f, 0x3, "80547d6405fab878dc83073e1a7fa2043bc10428260da6e5378f709062"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xf3, &(0x7f0000000140)=@string={0xf3, 0x3, "5e79baf7b6464659ab710b90bc5bb032e2ad2def9b76463c48580a9aebcb0885fe6ea8e5dba1d5fb44c6ccbda9283d5fb0e0b5d6ea0dc0022debfe1747f1497e06209fb21d0cce032c58617a5d3ff2f60f5d8c13bf623bc3f3918427f694e043108514f320bd3b78571853ae741035718aae2f73d993b03bff85ba32bf9052a9f49f28a65441ff66d3d9a34177a39fcc0ac3fe519e67dbc7b1ad656bac37b5e472646539951525c457ff7c999c8ecbeb5ac00bf4f164bdd65bf9fe9656041e5de9f144430bb5e065caa22f67dca085089d58cd508d6bb8d7d6ca658b1afc1d3edb13666ce2bafe2fb333fa690f4000cb65"}}, {0x87, &(0x7f0000000240)=@string={0x87, 0x3, "bb0bef669942cf4aa6eefb508155a84d6d6ec8fc95fe8a7984aaac4fc385c7543106e861d59ddbcaa6a35275ce3bb5873e19225084749763fac28722842df0989af841aa86f6a613ea5ff7e99a91417556d358b2835fcaa6c8bb4ca33f3f7daac5010edba78df3e70d1c1af46c1de43a845d72f4d9213e4eb24405cf8bcd50fcd9416fddc6"}}, {0x1b, &(0x7f0000000340)=@string={0x1b, 0x3, "1d1acbf45acd7ddc3f404858c768faf17fc8e9ca3f5525e436"}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0x7, 0xf9, {0xf9, 0x4, "651260d5f94ead9610834d742f5181361e3d514c611668ad981eab9ae80398e360638a37fb58b45211b5b241bdb900d80d486ed2155180d3c36e10131b83f4df18731e4ab22ebc17c7c98336735289885d8ee1a8115808ef3bca72ea5815ac849c88ad81aac41b5ddf69f247a1bf71ce5d6f443e3032bf085fabaf0fccbf8ef0c9ef10e551c6d91a2edbc1d6a084e3f2d1d8f1fb69f47a00fe07342fb31a9b46e647face39f706dd212a02d2d8d09354327e5a2cc2b41ac65d37f5c3f01fad80e6384a4f973ffec7225bb95b81c1a6cbff730c09563842737771a8f1d2d48536aa84a1f45fd8cdfb80cb44da3ede6c2b46700f5a437085"}}, &(0x7f0000000500)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "f4e86349da07516a47ae5c682cfabf58247c9c50be8c08f5b63d5e32aa04a30aafa8a8998acdb26181d3a116dc0cf73f4a24021d9d92231a89a54d537bb80af341238dda7b4fbf1271e25b43d1140c78efe235a244842056ff96a1217c005e985c38a98804f72a6f73fdb2c9fa30bbd7a82f70a68233deb29f08ad0ca22375a727068914fec44be5c339d018d6af381bc8a395585555090c0390a2"}}, &(0x7f00000005c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x0, 0x80, 0x20, "a0bd3448", "777040a0"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0xff, 0x5, 0x7f, 0x7ff, 0x3f}}}, &(0x7f0000001900)={0x84, &(0x7f00000006c0)={0x20, 0x0, 0x2d, "51978b5457c2678dc2419bae9690f08b1117d7158f13c5280627226402c30bd6cdee5e8661a3c885113543b597"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xbe}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0xc0, 0x20}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0x1f}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "c656"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001740)={0x40, 0x13, 0x6, @random="da4012d1090d"}, &(0x7f0000001780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000017c0)={0x40, 0x19, 0x2, 'Td'}, &(0x7f0000001800)={0x40, 0x1a, 0x2}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0xb5}, &(0x7f0000001880)={0x40, 0x1e, 0x1}, &(0x7f00000018c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:38:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6000, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) [ 2270.699482][ T2914] xt_limit: Overflow, try lower: 1241513984/7 [ 2270.812953][ T2912] vlan2: entered promiscuous mode [ 2270.846592][ T2912] macvtap0: entered promiscuous mode [ 2270.878572][ T2912] vlan2: entered allmulticast mode [ 2270.912771][T17965] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2270.921158][ T2912] macvtap0: entered allmulticast mode [ 2270.954036][ T2912] veth0_macvtap: entered allmulticast mode [ 2271.002829][ T2912] macvtap0: left allmulticast mode [ 2271.028320][ T2912] veth0_macvtap: left allmulticast mode [ 2271.060942][ T2912] macvtap0: left promiscuous mode 18:38:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xd2, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2271.293374][T17965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2271.328349][T17965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:38:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2271.418022][T17965] usb 5-1: config 0 descriptor?? [ 2271.518695][ T2926] xt_limit: Overflow, try lower: 1241513984/7 [ 2271.532969][T24746] gspca_stk1135: reg_w 0x350 err -71 [ 2271.542064][T24746] gspca_stk1135: serial bus timeout: status=0x00 [ 2271.562765][T24746] gspca_stk1135: Sensor write failed [ 2271.568312][T24746] gspca_stk1135: serial bus timeout: status=0x00 [ 2271.575635][T24746] gspca_stk1135: Sensor write failed [ 2271.581146][T24746] gspca_stk1135: serial bus timeout: status=0x00 [ 2271.589185][T24746] gspca_stk1135: Sensor read failed [ 2271.594823][T24746] gspca_stk1135: serial bus timeout: status=0x00 [ 2271.601333][T24746] gspca_stk1135: Sensor read failed [ 2271.606938][T24746] gspca_stk1135: Detected sensor type unknown (0x0) [ 2271.614037][T24746] gspca_stk1135: serial bus timeout: status=0x00 [ 2271.620609][T24746] gspca_stk1135: Sensor read failed [ 2271.626451][T24746] gspca_stk1135: serial bus timeout: status=0x00 [ 2271.633292][T24746] gspca_stk1135: Sensor read failed [ 2271.638750][T24746] gspca_stk1135: serial bus timeout: status=0x00 [ 2271.645638][T24746] gspca_stk1135: Sensor write failed [ 2271.651174][T24746] gspca_stk1135: serial bus timeout: status=0x00 [ 2271.657997][T24746] gspca_stk1135: Sensor write failed 18:38:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6800, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) [ 2271.663710][T24746] stk1135: probe of 4-1:25.0 failed with error -71 [ 2271.673289][T24746] usb 4-1: USB disconnect, device number 81 [ 2271.695800][ T2931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2271.739669][ T2926] vlan2: entered promiscuous mode [ 2271.745202][ T2931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2271.788862][ T2933] hub 9-0:1.0: USB hub found [ 2271.813325][T17965] ath6kl: Unsupported hardware version: 0x0 [ 2271.820558][ T2926] macvtap0: entered promiscuous mode [ 2271.836927][ T2933] hub 9-0:1.0: 8 ports detected [ 2271.843518][ T2926] vlan2: entered allmulticast mode [ 2271.872993][ T2926] macvtap0: entered allmulticast mode [ 2271.910460][ T2926] veth0_macvtap: entered allmulticast mode [ 2271.958038][ T2926] macvtap0: left allmulticast mode [ 2271.984226][ T2926] veth0_macvtap: left allmulticast mode [ 2272.019528][ T2926] macvtap0: left promiscuous mode 18:38:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0x10, 0xe1, {0xe1, 0x4, "6c9078ba537a865aad554bc54d27755ad39b236c328612162137b380d09f216a3cfd1335f92b1024f2b1ab22ef63e96297796fb642ba1686025aa13e275f6f36be36ef18190f128f3fcf03a4219d28747f7be0a208774346a6fbb072fd0aec5f7aa045c4784baeb37ea1d9019b555c0aef960e0c6febb8e8c8f125b8681359df83b83717b6eae212e3b8dcef33bda9f580d192049c17d070c34a610ddae9941e7892142d54694c4778deca0ff6e9938442c7a1267a56e233a9102c4e55deec5f9e99142b3a7f13921a013342589b0fce3a5c6f740842ba14bca7eccdcc8af6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x102f}}, &(0x7f0000000180)=ANY=[@ANYBLOB="0022ab460000050000002389"], &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x20, 0x1, {0x22, 0x9b0}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x13, 0xa8, "60c27f39b72a2aebd32745541f7a8d4a58fc28398afdacb9a3afdb76189cb3dd963aa04d3194b55499f45460b6c907586bf86a7675ec610b736118f5b60dba1ef4460885f23dbff568ee9c5dcf111e9bc0883af81b6206e5fa383e27c3358f68bef3753c2d2bf9ed10ecdd9d9d512582b9a8bd002e399a2d20c3434a7ad0ad3ed225388bba699151b87aedec70b4fc9df84bf8b3ee7cfa0b36943e5735eb4fee6a7bef0147a330bf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000380)={0x20, 0x1, 0x63, "845784f803dad83098d59f495fa12ffacf45299ac7ab3d744e6162d5ff58419958cbd06cc68816fb43266db87e0eaa27277d716f2fddc4a5764dc0cbbc882bf6d99c02adc4284dcf855946a888b69e61b1444a218b7d5b926ce8d1c382ac2695525f77"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xf0}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0x10, 0xe1, {0xe1, 0x4, "6c9078ba537a865aad554bc54d27755ad39b236c328612162137b380d09f216a3cfd1335f92b1024f2b1ab22ef63e96297796fb642ba1686025aa13e275f6f36be36ef18190f128f3fcf03a4219d28747f7be0a208774346a6fbb072fd0aec5f7aa045c4784baeb37ea1d9019b555c0aef960e0c6febb8e8c8f125b8681359df83b83717b6eae212e3b8dcef33bda9f580d192049c17d070c34a610ddae9941e7892142d54694c4778deca0ff6e9938442c7a1267a56e233a9102c4e55deec5f9e99142b3a7f13921a013342589b0fce3a5c6f740842ba14bca7eccdcc8af6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x102f}}, &(0x7f0000000180)=ANY=[@ANYBLOB="0022ab460000050000002389"], &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x20, 0x1, {0x22, 0x9b0}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x13, 0xa8, "60c27f39b72a2aebd32745541f7a8d4a58fc28398afdacb9a3afdb76189cb3dd963aa04d3194b55499f45460b6c907586bf86a7675ec610b736118f5b60dba1ef4460885f23dbff568ee9c5dcf111e9bc0883af81b6206e5fa383e27c3358f68bef3753c2d2bf9ed10ecdd9d9d512582b9a8bd002e399a2d20c3434a7ad0ad3ed225388bba699151b87aedec70b4fc9df84bf8b3ee7cfa0b36943e5735eb4fee6a7bef0147a330bf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000380)={0x20, 0x1, 0x63, "845784f803dad83098d59f495fa12ffacf45299ac7ab3d744e6162d5ff58419958cbd06cc68816fb43266db87e0eaa27277d716f2fddc4a5764dc0cbbc882bf6d99c02adc4284dcf855946a888b69e61b1444a218b7d5b926ce8d1c382ac2695525f77"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xf0}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) [ 2272.034310][T17965] ath6kl: Failed to init ath6kl core: -22 [ 2272.181961][T17965] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2272.249547][T17965] usb 5-1: USB disconnect, device number 119 [ 2272.482889][T25772] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2272.742827][T25772] usb 4-1: Using ep0 maxpacket: 8 [ 2272.943074][T25772] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 2272.968472][T25772] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 2272.994423][T25772] usb 4-1: Product: syz [ 2273.105466][T25772] gspca_main: stk1135-2.14.0 probing 174f:6a31 18:38:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xd8, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:42 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x4, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:42 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0xd42, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x72, 0xb3, 0x65, 0x0, 0x3f0, 0x1f1d, 0xe316, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd30, 0x4, 0x5, 0x80, 0x80, 0x4, [{{0x9, 0x4, 0x3, 0x2, 0xf, 0xfb, 0x69, 0x4d, 0x5, [@hid_hid={0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xf10}}], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x86, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xf5e6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x7f, 0x57, 0x3f, [@generic={0x87, 0xa, "396dc8e2f720d0a79ba55598ca8b7241fc30ca855ec7137e0a0c079059078881f7ba4850d689825a14a44f42de6d5543427c202938f54979d96bb0273b7f03a0c50c936bdaae9f44a0030fdaafe4f2349e870843d85706ff41bb3fd2f0b83d36c8ea6423708e93c16bad91d8fd1d0beb2bbc53d7ca32011e919c05b8d8a5662e96e4d33ccb"}, @generic={0x13, 0x31, "4e9a30e676d81a2116124086a5a047ef3a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x8, 0x2, 0x40, [@generic={0x8c, 0x30, "75a0f30adfa3bb9f0e971add8f132ed665681b14c540869157c3fcb7a2cd84c3036cdf96d6ada0b12635d42e81c2ec860cb099548816b0d3ffe4907a0ee14ee07ab76c0f3614000ed3a048e95e984c67c2ea04be796da0754b6d10a2a228464bdb20bd482fc1ec64241e0b73acec7141da371b2d3614b59686704a1fedcb09b45d41be0988f3613ad578"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x1, 0xd6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x9a, 0x1f, 0xff, [@generic={0x1f, 0x6, "3b8999f25890b4d4082038fac6b6a81e9b3a2bea2597c30ad3f902f077"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x7, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x7, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x7c}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x2, 0x3f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xe5, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x7, 0x1000}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x70, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4, 0x5}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x4, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x5b2}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x0, 0xff, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x9}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x5, 0x1, 0x1, [@generic={0x65, 0x7, "1f6faf4c54edabfc60ca33a573a2b424e717c039c951ee49eeecae0604c6b68ea4ab8eb6daa889640f73b815cae97063f22cd3e605906c8613dd4b54fb31af283be7195595d7560c999a361dc67693760e5353d971eb868a9b02ff702a29ee87010e1a"}]}}]}}, {{0x9, 0x4, 0x3b, 0x8, 0xc, 0xe8, 0x3b, 0x99, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x751, 0x2c}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x8b8, 0x7, "17d3"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x4, 0xa, 0x8, 0xa], 0x81}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x6, "d50a"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x3, 0x2, 0x12], 0x81}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x81, 'PD'}]}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x20, 0x1, [@generic={0xa4, 0x6, "5b7d28c5f35fcf2fade1b061112aad3bf20a0f2e0741052f88b33bc13f4cdafd3e2d27df4d6288af91fc10c1686d29aa9862a6a3257699e245b276ff601696cf5f533a3c4ab531fb576e043faab486c2b04b1d7f6022fac3d7a20edb945374cc52f8894d81474b23cd852d039846fc3a2363162a73050d439158147185e96715a026acb9bfa3255016ec988cda88f9a666c56d2cb3ccb24c3f4338113e14435496e9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x5, 0x3, 0x3f, [@generic={0x41, 0xd, "64af8e94a1d08fde12475888f23b1167589f64f977ffe8cb86858781e51226ccfc6829e6815a176abc85ccc3a166c1b91bc6d42ea5abe7a1c8154f91e2c335"}, @generic={0x72, 0xb, "523a67e2b551f91fa2cf865c7e2c3a9020a96a8e0e1279be7b5b2eb12be97e6e67b3ef8f212544e71817b476f980e9bec76c34e0393c0d3459ff1e224655262f152b000632527f0e234f459e816b4c5094a5e635ebec3336d5f6fa50d0703d45f85bc90743614bdd26f233d1ae69872d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7f, 0x4e, 0x0, [@generic={0xb8, 0xe, "ecdffe017ac4e22dbc7532e75bf417ee3ee9efa4efd7a464555255050b9ad335cc42547bd0e9f3f84b429830f552e5f2a3efba6eb13a44fe2ed3bf310e986cb3bfacc9e675802f71ae0c2cc88028b22867d88e923e344e8f10809b02e05143f2e92d0d76cb199a3534ffd012829ce7184c3f8b5b2ccd0070bf22599ffb887f45beb33be8840ef7ab3c33e512e5a815d59d3b31bf8f3e7c2e542e9238f692392a1a72fa83395e8dee157f1332c4236ad95ddfb57511c0"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x902a}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xfc, 0x8, 0x1, [@generic={0x72, 0x21, "68c896a7ccb62199bd743ffd08836a16a61625cb80f45dc209c64ac4821a7e6bd24f670ed9c2d91dd3bdc210e9fe39547e656f863513727405a8fc9c4f8f296eb0fea9d24f970c28fe647e35aaadd01bfe9eb246140a849ed2d0d8b7cc6697d30699668c5f1526b9b941b0c24f815e6a"}]}}, {{0x9, 0x5, 0xe, 0xbe5921e002a34e60, 0x8, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0xff, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8, 0x7f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x4c9}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x1, 0x7, 0x4, [@generic={0xfb, 0x6, "effd76bfec896afd0eb6bd96b43a75111e76c80e595befaab8066a9f08245d082a924a5a18b61ddaf0429a9f5c8b62b906c1dbfc331dbf0b3a514fe0e1317ead36de8107e5d733406d19aaf715edab4c680e0b3ee2cc3085ec1b67daf278658ed9da08e676b6e2a9ab7576599285e4e53fb7b9e4eedc66c1480ccf919bf62006107956a3dc3eae2a88bbfe2fe8b9f91ea15434cccc630e03784a95a1833c77fdc820116dbbeca38a399545f32214302de38ff4a1a814331395b03f8ae228f1ab04e84c153e7460ef18feabbf34e033824c18dc4a19259b394ce3f1f13b2ef62b795df4cbf6f6d219ca7905c056f5c75635cace9ad7a92c6878"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x80, 0x3, 0x40, [@generic={0xe, 0x6, "2cf3049ea9956bd49dd182f8"}, @generic={0x6a, 0x31, "9e7cd7aa8876e225adda399c3a057ed58007eccebb2b1387ba187788fd34ced09bf646e3dfb7ab83c0c11ce06da0aa2a18d288a64f4b0358edb74201522767f6aec6a9869fe1e3fff3dbc918baf757b4bd61e08a2bf6ebb7bdce3a6d46b8133877bb2212e95bfba4"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xfa, 0x48, 0x1, [@generic={0x7f, 0xa, "65104163287eb26451a610f07ff4566d68810eaf79492b3808ca09554475fee4d04e721ab66c99ea8f4d6139a7829f5281970c756bd542b8af3fac96334162f19922fb46626232e85d8b6510edae3dc8fe23e70d8e9ec2aa9268533b89b1c6df9c21e7b10998a7b8275d99050f8c904c167bf124586c8272b96ec16db1"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x9a, 0xb6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x8001}]}}]}}, {{0x9, 0x4, 0x88, 0x4, 0x8, 0xd5, 0xb2, 0xc5, 0x2, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e0821aeb77"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x45, 0x4, 0x1c, 0x1f}, {0x6, 0x24, 0x1a, 0x4, 0x30}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0xbd, 0x24, 0x13, 0x1f, "cc12229aaa67fffbbd92fa61e93ac3fc23bd43f173418bf74abb877790d9e6ef4f63548b84e7c62e08afe2c75a56a29289c24270a4dfa46831c6881ebfe4caf75bf9ffd930dbe2769bd41119269cc8aaae5e81d83a81803e23962886f72ac008a445ca49d40052f2d375db2396ab592e2872053d42b5d258d9eca2315196393a9dbf3acba9ec02520f27fdede94d328c8641720dfeda3567b8b0f82d26612a8107b021210c757cb96845f994056c16f212d6a9e10be88e3cc6"}, @country_functional={0xa, 0x24, 0x7, 0x8, 0xfffa, [0x0, 0x3]}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x2, 0xc4, 0x1, 0x1000, 0x4}]}, @generic={0x20, 0x31, "fe0b2d8dbfd372b8bba45fe1da6e9a70c80d0ce3ba98f13d3fb082b2847d"}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x5, 0x0, 0x80, [@generic={0xd2, 0xd, "381a1a0890f94905c3a0b904c4711fced5b4cc52a5f9c4ab05cc7268b9068c682c6c65943c7a703300d8a661526685de713f900ccf6fada4771b832d8b17ff380a41b10c0e459a67f78e5e71442f9ef02d5253d28cc37d02d215243634e65c739d01cf598c1d76e91f2eddba0b3722607b68f4aa634aa283459a9a9cae7f0129737a6e72950850764fb7bddd6ed9363a058888dea4f267e37dd30a77dbc938eb574be90fae75a3afc61ef1d0b2cabcc8aa03d00f31f4d9340e5631d27d63111cab8b792dcd50d9d00b9f36e17b01cde6"}, @generic={0xd9, 0x3, "6d5a29f1c8b39663c0ec65d58468b1b8aae704db052668ac72ab85d9a4f2a6d5ea7aeb73fe3dfc54284a8714ccadec88d6a2e96c7d184bfc6929a46f5e2417c6b7b388c47b2b6e1209794f9c29d46ec7b639ee3f7bdca036d02c67222637dc5a6dc4d4c91f9558f81ffd37dbc757e73d7d5d0ad290dfa3831fd16fbabbf10df4bd9a20e733879f43cfd1bb859914e13ce69d0c7f3034bf8d4f80776a2d9e379c86e7d88b198d105de1fba618408bd099ae05a33fe178c9d629c56c41e7712be622a8e5e550731679efd8e161cb4623b97ab70ea7371595"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x80}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x6, 0x0, 0x3, [@generic={0x40, 0xd, "e1b352ec36a2ee4d88b426787bfe5985a812706b4f27505f556814ea127b23788928fd172819c977a79121233444387af6c41240d96984f0793bb63c4496"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6f, 0x6, 0x1, [@generic={0x44, 0x31, "39d900b304f6d095769fe559535574f89c24617f5dc0e6085905c685bd9cecfab415b4e59ed238742c492bf29f6c829d72077688ee2f47b431322e56e0b0d318dad1"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x9, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6c, 0x7ff}, @generic={0xa7, 0x23, "5ee96156146f43373f8173c46c921ccb3a1af29e404a9700655d585cedba44003f07cab1c283e010d7fca4b987a4db8c1a0410223f3dbb29f75cfe8b498fecdf61c90614643756287937d2d183e9d6cba8f8675c9a96a98b212fd87e17bb63ad423cf0bb5546546b5e6a2b4ad1f3a7d3c04ef72d1cd67a658d4c0e2d2e9555259fdd0543a93825cbcaad831e3b1b11c7665fee48394d36ed25771ff79880a325f36c1961d7"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0xff, 0x6, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3b7, 0x2, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x20, 0x81, 0x97, [@generic={0x64, 0x11, "7cf20a4460aaad2d5604b204a009337e90d301b4cfb830ffd16534935ac8332b8824173899725c29037ef74c40c58c4ddff75b32bf7423ef42a78ce942b8e61e52c24df10058696167986cfdcbc5e2b422174111789e2906025ad151ee43723fa441"}]}}]}}, {{0x9, 0x4, 0x9e, 0x9, 0x1, 0xa0, 0xa5, 0xf7, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "16"}, {0x5, 0x24, 0x0, 0x976}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5b20, 0x56, 0x9f}, {0x6, 0x24, 0x1a, 0x4, 0x14}, [@obex={0x5, 0x24, 0x15, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x1, [0x15c]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x80, 0xbe, 0x7f}, @mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x94, 0x1, 0x91}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0xb, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x5}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x20, 0x7, 0xff, 0xd1}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x6, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x170, 0xf00, 0x3, [0x3f07, 0xc0]}]}, 0x5, [{0x1f, &(0x7f0000000080)=@string={0x1f, 0x3, "80547d6405fab878dc83073e1a7fa2043bc10428260da6e5378f709062"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xf3, &(0x7f0000000140)=@string={0xf3, 0x3, "5e79baf7b6464659ab710b90bc5bb032e2ad2def9b76463c48580a9aebcb0885fe6ea8e5dba1d5fb44c6ccbda9283d5fb0e0b5d6ea0dc0022debfe1747f1497e06209fb21d0cce032c58617a5d3ff2f60f5d8c13bf623bc3f3918427f694e043108514f320bd3b78571853ae741035718aae2f73d993b03bff85ba32bf9052a9f49f28a65441ff66d3d9a34177a39fcc0ac3fe519e67dbc7b1ad656bac37b5e472646539951525c457ff7c999c8ecbeb5ac00bf4f164bdd65bf9fe9656041e5de9f144430bb5e065caa22f67dca085089d58cd508d6bb8d7d6ca658b1afc1d3edb13666ce2bafe2fb333fa690f4000cb65"}}, {0x87, &(0x7f0000000240)=@string={0x87, 0x3, "bb0bef669942cf4aa6eefb508155a84d6d6ec8fc95fe8a7984aaac4fc385c7543106e861d59ddbcaa6a35275ce3bb5873e19225084749763fac28722842df0989af841aa86f6a613ea5ff7e99a91417556d358b2835fcaa6c8bb4ca33f3f7daac5010edba78df3e70d1c1af46c1de43a845d72f4d9213e4eb24405cf8bcd50fcd9416fddc6"}}, {0x1b, &(0x7f0000000340)=@string={0x1b, 0x3, "1d1acbf45acd7ddc3f404858c768faf17fc8e9ca3f5525e436"}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0x7, 0xf9, {0xf9, 0x4, "651260d5f94ead9610834d742f5181361e3d514c611668ad981eab9ae80398e360638a37fb58b45211b5b241bdb900d80d486ed2155180d3c36e10131b83f4df18731e4ab22ebc17c7c98336735289885d8ee1a8115808ef3bca72ea5815ac849c88ad81aac41b5ddf69f247a1bf71ce5d6f443e3032bf085fabaf0fccbf8ef0c9ef10e551c6d91a2edbc1d6a084e3f2d1d8f1fb69f47a00fe07342fb31a9b46e647face39f706dd212a02d2d8d09354327e5a2cc2b41ac65d37f5c3f01fad80e6384a4f973ffec7225bb95b81c1a6cbff730c09563842737771a8f1d2d48536aa84a1f45fd8cdfb80cb44da3ede6c2b46700f5a437085"}}, &(0x7f0000000500)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "f4e86349da07516a47ae5c682cfabf58247c9c50be8c08f5b63d5e32aa04a30aafa8a8998acdb26181d3a116dc0cf73f4a24021d9d92231a89a54d537bb80af341238dda7b4fbf1271e25b43d1140c78efe235a244842056ff96a1217c005e985c38a98804f72a6f73fdb2c9fa30bbd7a82f70a68233deb29f08ad0ca22375a727068914fec44be5c339d018d6af381bc8a395585555090c0390a2"}}, &(0x7f00000005c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x0, 0x80, 0x20, "a0bd3448", "777040a0"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0xff, 0x5, 0x7f, 0x7ff, 0x3f}}}, &(0x7f0000001900)={0x84, &(0x7f00000006c0)={0x20, 0x0, 0x2d, "51978b5457c2678dc2419bae9690f08b1117d7158f13c5280627226402c30bd6cdee5e8661a3c885113543b597"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xbe}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0xc0, 0x20}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0x1f}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "c656"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001740)={0x40, 0x13, 0x6, @random="da4012d1090d"}, &(0x7f0000001780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000017c0)={0x40, 0x19, 0x2, 'Td'}, &(0x7f0000001800)={0x40, 0x1a, 0x2}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0xb5}, &(0x7f0000001880)={0x40, 0x1e, 0x1}, &(0x7f00000018c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0xd42, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x72, 0xb3, 0x65, 0x0, 0x3f0, 0x1f1d, 0xe316, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd30, 0x4, 0x5, 0x80, 0x80, 0x4, [{{0x9, 0x4, 0x3, 0x2, 0xf, 0xfb, 0x69, 0x4d, 0x5, [@hid_hid={0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xf10}}], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x86, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xf5e6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x7f, 0x57, 0x3f, [@generic={0x87, 0xa, "396dc8e2f720d0a79ba55598ca8b7241fc30ca855ec7137e0a0c079059078881f7ba4850d689825a14a44f42de6d5543427c202938f54979d96bb0273b7f03a0c50c936bdaae9f44a0030fdaafe4f2349e870843d85706ff41bb3fd2f0b83d36c8ea6423708e93c16bad91d8fd1d0beb2bbc53d7ca32011e919c05b8d8a5662e96e4d33ccb"}, @generic={0x13, 0x31, "4e9a30e676d81a2116124086a5a047ef3a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x8, 0x2, 0x40, [@generic={0x8c, 0x30, "75a0f30adfa3bb9f0e971add8f132ed665681b14c540869157c3fcb7a2cd84c3036cdf96d6ada0b12635d42e81c2ec860cb099548816b0d3ffe4907a0ee14ee07ab76c0f3614000ed3a048e95e984c67c2ea04be796da0754b6d10a2a228464bdb20bd482fc1ec64241e0b73acec7141da371b2d3614b59686704a1fedcb09b45d41be0988f3613ad578"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x1, 0xd6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x9a, 0x1f, 0xff, [@generic={0x1f, 0x6, "3b8999f25890b4d4082038fac6b6a81e9b3a2bea2597c30ad3f902f077"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x7, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x7, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x7c}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x2, 0x3f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xe5, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x7, 0x1000}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x70, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4, 0x5}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x4, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x5b2}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x0, 0xff, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x9}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x5, 0x1, 0x1, [@generic={0x65, 0x7, "1f6faf4c54edabfc60ca33a573a2b424e717c039c951ee49eeecae0604c6b68ea4ab8eb6daa889640f73b815cae97063f22cd3e605906c8613dd4b54fb31af283be7195595d7560c999a361dc67693760e5353d971eb868a9b02ff702a29ee87010e1a"}]}}]}}, {{0x9, 0x4, 0x3b, 0x8, 0xc, 0xe8, 0x3b, 0x99, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x751, 0x2c}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x8b8, 0x7, "17d3"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x4, 0xa, 0x8, 0xa], 0x81}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x6, "d50a"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x3, 0x2, 0x12], 0x81}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x81, 'PD'}]}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x20, 0x1, [@generic={0xa4, 0x6, "5b7d28c5f35fcf2fade1b061112aad3bf20a0f2e0741052f88b33bc13f4cdafd3e2d27df4d6288af91fc10c1686d29aa9862a6a3257699e245b276ff601696cf5f533a3c4ab531fb576e043faab486c2b04b1d7f6022fac3d7a20edb945374cc52f8894d81474b23cd852d039846fc3a2363162a73050d439158147185e96715a026acb9bfa3255016ec988cda88f9a666c56d2cb3ccb24c3f4338113e14435496e9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x5, 0x3, 0x3f, [@generic={0x41, 0xd, "64af8e94a1d08fde12475888f23b1167589f64f977ffe8cb86858781e51226ccfc6829e6815a176abc85ccc3a166c1b91bc6d42ea5abe7a1c8154f91e2c335"}, @generic={0x72, 0xb, "523a67e2b551f91fa2cf865c7e2c3a9020a96a8e0e1279be7b5b2eb12be97e6e67b3ef8f212544e71817b476f980e9bec76c34e0393c0d3459ff1e224655262f152b000632527f0e234f459e816b4c5094a5e635ebec3336d5f6fa50d0703d45f85bc90743614bdd26f233d1ae69872d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7f, 0x4e, 0x0, [@generic={0xb8, 0xe, "ecdffe017ac4e22dbc7532e75bf417ee3ee9efa4efd7a464555255050b9ad335cc42547bd0e9f3f84b429830f552e5f2a3efba6eb13a44fe2ed3bf310e986cb3bfacc9e675802f71ae0c2cc88028b22867d88e923e344e8f10809b02e05143f2e92d0d76cb199a3534ffd012829ce7184c3f8b5b2ccd0070bf22599ffb887f45beb33be8840ef7ab3c33e512e5a815d59d3b31bf8f3e7c2e542e9238f692392a1a72fa83395e8dee157f1332c4236ad95ddfb57511c0"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x902a}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xfc, 0x8, 0x1, [@generic={0x72, 0x21, "68c896a7ccb62199bd743ffd08836a16a61625cb80f45dc209c64ac4821a7e6bd24f670ed9c2d91dd3bdc210e9fe39547e656f863513727405a8fc9c4f8f296eb0fea9d24f970c28fe647e35aaadd01bfe9eb246140a849ed2d0d8b7cc6697d30699668c5f1526b9b941b0c24f815e6a"}]}}, {{0x9, 0x5, 0xe, 0xbe5921e002a34e60, 0x8, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0xff, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8, 0x7f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x4c9}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x1, 0x7, 0x4, [@generic={0xfb, 0x6, "effd76bfec896afd0eb6bd96b43a75111e76c80e595befaab8066a9f08245d082a924a5a18b61ddaf0429a9f5c8b62b906c1dbfc331dbf0b3a514fe0e1317ead36de8107e5d733406d19aaf715edab4c680e0b3ee2cc3085ec1b67daf278658ed9da08e676b6e2a9ab7576599285e4e53fb7b9e4eedc66c1480ccf919bf62006107956a3dc3eae2a88bbfe2fe8b9f91ea15434cccc630e03784a95a1833c77fdc820116dbbeca38a399545f32214302de38ff4a1a814331395b03f8ae228f1ab04e84c153e7460ef18feabbf34e033824c18dc4a19259b394ce3f1f13b2ef62b795df4cbf6f6d219ca7905c056f5c75635cace9ad7a92c6878"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x80, 0x3, 0x40, [@generic={0xe, 0x6, "2cf3049ea9956bd49dd182f8"}, @generic={0x6a, 0x31, "9e7cd7aa8876e225adda399c3a057ed58007eccebb2b1387ba187788fd34ced09bf646e3dfb7ab83c0c11ce06da0aa2a18d288a64f4b0358edb74201522767f6aec6a9869fe1e3fff3dbc918baf757b4bd61e08a2bf6ebb7bdce3a6d46b8133877bb2212e95bfba4"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xfa, 0x48, 0x1, [@generic={0x7f, 0xa, "65104163287eb26451a610f07ff4566d68810eaf79492b3808ca09554475fee4d04e721ab66c99ea8f4d6139a7829f5281970c756bd542b8af3fac96334162f19922fb46626232e85d8b6510edae3dc8fe23e70d8e9ec2aa9268533b89b1c6df9c21e7b10998a7b8275d99050f8c904c167bf124586c8272b96ec16db1"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x9a, 0xb6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x8001}]}}]}}, {{0x9, 0x4, 0x88, 0x4, 0x8, 0xd5, 0xb2, 0xc5, 0x2, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e0821aeb77"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x45, 0x4, 0x1c, 0x1f}, {0x6, 0x24, 0x1a, 0x4, 0x30}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0xbd, 0x24, 0x13, 0x1f, "cc12229aaa67fffbbd92fa61e93ac3fc23bd43f173418bf74abb877790d9e6ef4f63548b84e7c62e08afe2c75a56a29289c24270a4dfa46831c6881ebfe4caf75bf9ffd930dbe2769bd41119269cc8aaae5e81d83a81803e23962886f72ac008a445ca49d40052f2d375db2396ab592e2872053d42b5d258d9eca2315196393a9dbf3acba9ec02520f27fdede94d328c8641720dfeda3567b8b0f82d26612a8107b021210c757cb96845f994056c16f212d6a9e10be88e3cc6"}, @country_functional={0xa, 0x24, 0x7, 0x8, 0xfffa, [0x0, 0x3]}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x2, 0xc4, 0x1, 0x1000, 0x4}]}, @generic={0x20, 0x31, "fe0b2d8dbfd372b8bba45fe1da6e9a70c80d0ce3ba98f13d3fb082b2847d"}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x5, 0x0, 0x80, [@generic={0xd2, 0xd, "381a1a0890f94905c3a0b904c4711fced5b4cc52a5f9c4ab05cc7268b9068c682c6c65943c7a703300d8a661526685de713f900ccf6fada4771b832d8b17ff380a41b10c0e459a67f78e5e71442f9ef02d5253d28cc37d02d215243634e65c739d01cf598c1d76e91f2eddba0b3722607b68f4aa634aa283459a9a9cae7f0129737a6e72950850764fb7bddd6ed9363a058888dea4f267e37dd30a77dbc938eb574be90fae75a3afc61ef1d0b2cabcc8aa03d00f31f4d9340e5631d27d63111cab8b792dcd50d9d00b9f36e17b01cde6"}, @generic={0xd9, 0x3, "6d5a29f1c8b39663c0ec65d58468b1b8aae704db052668ac72ab85d9a4f2a6d5ea7aeb73fe3dfc54284a8714ccadec88d6a2e96c7d184bfc6929a46f5e2417c6b7b388c47b2b6e1209794f9c29d46ec7b639ee3f7bdca036d02c67222637dc5a6dc4d4c91f9558f81ffd37dbc757e73d7d5d0ad290dfa3831fd16fbabbf10df4bd9a20e733879f43cfd1bb859914e13ce69d0c7f3034bf8d4f80776a2d9e379c86e7d88b198d105de1fba618408bd099ae05a33fe178c9d629c56c41e7712be622a8e5e550731679efd8e161cb4623b97ab70ea7371595"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x80}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x6, 0x0, 0x3, [@generic={0x40, 0xd, "e1b352ec36a2ee4d88b426787bfe5985a812706b4f27505f556814ea127b23788928fd172819c977a79121233444387af6c41240d96984f0793bb63c4496"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6f, 0x6, 0x1, [@generic={0x44, 0x31, "39d900b304f6d095769fe559535574f89c24617f5dc0e6085905c685bd9cecfab415b4e59ed238742c492bf29f6c829d72077688ee2f47b431322e56e0b0d318dad1"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x9, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6c, 0x7ff}, @generic={0xa7, 0x23, "5ee96156146f43373f8173c46c921ccb3a1af29e404a9700655d585cedba44003f07cab1c283e010d7fca4b987a4db8c1a0410223f3dbb29f75cfe8b498fecdf61c90614643756287937d2d183e9d6cba8f8675c9a96a98b212fd87e17bb63ad423cf0bb5546546b5e6a2b4ad1f3a7d3c04ef72d1cd67a658d4c0e2d2e9555259fdd0543a93825cbcaad831e3b1b11c7665fee48394d36ed25771ff79880a325f36c1961d7"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0xff, 0x6, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3b7, 0x2, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x20, 0x81, 0x97, [@generic={0x64, 0x11, "7cf20a4460aaad2d5604b204a009337e90d301b4cfb830ffd16534935ac8332b8824173899725c29037ef74c40c58c4ddff75b32bf7423ef42a78ce942b8e61e52c24df10058696167986cfdcbc5e2b422174111789e2906025ad151ee43723fa441"}]}}]}}, {{0x9, 0x4, 0x9e, 0x9, 0x1, 0xa0, 0xa5, 0xf7, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "16"}, {0x5, 0x24, 0x0, 0x976}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5b20, 0x56, 0x9f}, {0x6, 0x24, 0x1a, 0x4, 0x14}, [@obex={0x5, 0x24, 0x15, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x1, [0x15c]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x80, 0xbe, 0x7f}, @mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x94, 0x1, 0x91}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0xb, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x5}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x20, 0x7, 0xff, 0xd1}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x6, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x170, 0xf00, 0x3, [0x3f07, 0xc0]}]}, 0x5, [{0x1f, &(0x7f0000000080)=@string={0x1f, 0x3, "80547d6405fab878dc83073e1a7fa2043bc10428260da6e5378f709062"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xf3, &(0x7f0000000140)=@string={0xf3, 0x3, "5e79baf7b6464659ab710b90bc5bb032e2ad2def9b76463c48580a9aebcb0885fe6ea8e5dba1d5fb44c6ccbda9283d5fb0e0b5d6ea0dc0022debfe1747f1497e06209fb21d0cce032c58617a5d3ff2f60f5d8c13bf623bc3f3918427f694e043108514f320bd3b78571853ae741035718aae2f73d993b03bff85ba32bf9052a9f49f28a65441ff66d3d9a34177a39fcc0ac3fe519e67dbc7b1ad656bac37b5e472646539951525c457ff7c999c8ecbeb5ac00bf4f164bdd65bf9fe9656041e5de9f144430bb5e065caa22f67dca085089d58cd508d6bb8d7d6ca658b1afc1d3edb13666ce2bafe2fb333fa690f4000cb65"}}, {0x87, &(0x7f0000000240)=@string={0x87, 0x3, "bb0bef669942cf4aa6eefb508155a84d6d6ec8fc95fe8a7984aaac4fc385c7543106e861d59ddbcaa6a35275ce3bb5873e19225084749763fac28722842df0989af841aa86f6a613ea5ff7e99a91417556d358b2835fcaa6c8bb4ca33f3f7daac5010edba78df3e70d1c1af46c1de43a845d72f4d9213e4eb24405cf8bcd50fcd9416fddc6"}}, {0x1b, &(0x7f0000000340)=@string={0x1b, 0x3, "1d1acbf45acd7ddc3f404858c768faf17fc8e9ca3f5525e436"}}]}) (async) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0x7, 0xf9, {0xf9, 0x4, "651260d5f94ead9610834d742f5181361e3d514c611668ad981eab9ae80398e360638a37fb58b45211b5b241bdb900d80d486ed2155180d3c36e10131b83f4df18731e4ab22ebc17c7c98336735289885d8ee1a8115808ef3bca72ea5815ac849c88ad81aac41b5ddf69f247a1bf71ce5d6f443e3032bf085fabaf0fccbf8ef0c9ef10e551c6d91a2edbc1d6a084e3f2d1d8f1fb69f47a00fe07342fb31a9b46e647face39f706dd212a02d2d8d09354327e5a2cc2b41ac65d37f5c3f01fad80e6384a4f973ffec7225bb95b81c1a6cbff730c09563842737771a8f1d2d48536aa84a1f45fd8cdfb80cb44da3ede6c2b46700f5a437085"}}, &(0x7f0000000500)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "f4e86349da07516a47ae5c682cfabf58247c9c50be8c08f5b63d5e32aa04a30aafa8a8998acdb26181d3a116dc0cf73f4a24021d9d92231a89a54d537bb80af341238dda7b4fbf1271e25b43d1140c78efe235a244842056ff96a1217c005e985c38a98804f72a6f73fdb2c9fa30bbd7a82f70a68233deb29f08ad0ca22375a727068914fec44be5c339d018d6af381bc8a395585555090c0390a2"}}, &(0x7f00000005c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x0, 0x80, 0x20, "a0bd3448", "777040a0"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0xff, 0x5, 0x7f, 0x7ff, 0x3f}}}, &(0x7f0000001900)={0x84, &(0x7f00000006c0)={0x20, 0x0, 0x2d, "51978b5457c2678dc2419bae9690f08b1117d7158f13c5280627226402c30bd6cdee5e8661a3c885113543b597"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xbe}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0xc0, 0x20}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0x1f}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "c656"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001740)={0x40, 0x13, 0x6, @random="da4012d1090d"}, &(0x7f0000001780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000017c0)={0x40, 0x19, 0x2, 'Td'}, &(0x7f0000001800)={0x40, 0x1a, 0x2}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0xb5}, &(0x7f0000001880)={0x40, 0x1e, 0x1}, &(0x7f00000018c0)={0x40, 0x21, 0x1}}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 18:38:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6c00, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) [ 2273.622236][ T2952] xt_limit: Overflow, try lower: 1241513984/7 [ 2273.737809][ T2952] vlan2: entered promiscuous mode [ 2273.758607][ T2952] macvtap0: entered promiscuous mode [ 2273.786254][ T2952] vlan2: entered allmulticast mode [ 2273.813386][ T2952] macvtap0: entered allmulticast mode [ 2273.832741][T26960] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2273.858732][ T2952] veth0_macvtap: entered allmulticast mode [ 2273.913455][ T2952] macvtap0: left allmulticast mode [ 2273.960448][ T2952] veth0_macvtap: left allmulticast mode [ 2274.001544][ T2952] macvtap0: left promiscuous mode 18:38:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2274.223528][T26960] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2274.257610][T26960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2274.321543][T26960] usb 5-1: config 0 descriptor?? [ 2274.330689][ T2965] xt_limit: Overflow, try lower: 1241513984/7 [ 2274.480999][ T2965] vlan2: entered promiscuous mode [ 2274.486411][ T2965] macvtap0: entered promiscuous mode [ 2274.497565][ T2965] vlan2: entered allmulticast mode [ 2274.509992][ T2965] macvtap0: entered allmulticast mode [ 2274.516043][ T2965] veth0_macvtap: entered allmulticast mode [ 2274.538341][ T2965] macvtap0: left allmulticast mode [ 2274.543715][ T2965] veth0_macvtap: left allmulticast mode [ 2274.549720][ T2965] macvtap0: left promiscuous mode 18:38:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xf2, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2274.814979][ T2950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.835597][ T2950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.873014][T26960] ath6kl: Unsupported hardware version: 0x0 [ 2274.918536][ T2970] xt_limit: Overflow, try lower: 1241513984/7 [ 2274.980988][ T2970] vlan2: entered promiscuous mode [ 2274.992840][ T2970] macvtap0: entered promiscuous mode [ 2275.016148][ T2970] vlan2: entered allmulticast mode [ 2275.031763][ T2970] macvtap0: entered allmulticast mode [ 2275.047945][ T2970] veth0_macvtap: entered allmulticast mode [ 2275.087939][ T2950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2275.099954][ T2970] macvtap0: left allmulticast mode [ 2275.105781][ T2970] veth0_macvtap: left allmulticast mode [ 2275.111557][ T2970] macvtap0: left promiscuous mode [ 2275.112902][ T2972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2275.153886][ T2950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2275.180317][ T2972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:38:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfc, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:44 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904400001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2275.265018][T26960] ath6kl: Failed to init ath6kl core: -22 [ 2275.366162][T26960] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2275.396763][T26960] usb 5-1: USB disconnect, device number 120 [ 2275.399736][ T2977] xt_limit: Overflow, try lower: 1241513984/7 [ 2275.566615][ T2976] vlan2: entered promiscuous mode [ 2275.600338][ T2976] macvtap0: entered promiscuous mode [ 2275.622101][ T2976] vlan2: entered allmulticast mode [ 2275.632818][ T2976] macvtap0: entered allmulticast mode [ 2275.638598][ T2976] veth0_macvtap: entered allmulticast mode [ 2275.648554][ T2976] macvtap0: left allmulticast mode [ 2275.663170][ T2976] veth0_macvtap: left allmulticast mode [ 2275.669118][ T2976] macvtap0: left promiscuous mode 18:38:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x11a, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2275.843029][T26960] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2275.939213][ T2982] xt_limit: Overflow, try lower: 1241513984/7 [ 2275.950152][ T2942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2276.003100][ T2942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2276.110435][ T2982] vlan2: entered promiscuous mode [ 2276.140598][ T2982] macvtap0: entered promiscuous mode [ 2276.146441][T25772] gspca_stk1135: reg_w 0x351 err -71 [ 2276.154382][T25772] gspca_stk1135: serial bus timeout: status=0x00 [ 2276.179308][ T2982] vlan2: entered allmulticast mode [ 2276.187662][T25772] gspca_stk1135: Sensor write failed [ 2276.208686][ T2982] macvtap0: entered allmulticast mode [ 2276.216712][T25772] gspca_stk1135: serial bus timeout: status=0x00 [ 2276.234739][ T2982] veth0_macvtap: entered allmulticast mode [ 2276.242469][T25772] gspca_stk1135: Sensor write failed [ 2276.266374][T25772] gspca_stk1135: serial bus timeout: status=0x00 [ 2276.283266][T26960] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 2276.304545][T25772] gspca_stk1135: Sensor read failed [ 2276.309948][T26960] usb 5-1: config 0 has no interface number 0 [ 2276.324169][T25772] gspca_stk1135: serial bus timeout: status=0x00 [ 2276.356983][T26960] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2276.386302][T26960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.422183][T26960] usb 5-1: config 0 descriptor?? [ 2276.429897][T25772] gspca_stk1135: Sensor read failed [ 2276.489770][T25772] gspca_stk1135: Detected sensor type unknown (0x0) [ 2276.534983][T25772] gspca_stk1135: serial bus timeout: status=0x00 [ 2276.624614][T25772] gspca_stk1135: Sensor read failed [ 2276.704438][T25772] gspca_stk1135: serial bus timeout: status=0x00 [ 2276.779755][T25772] gspca_stk1135: Sensor read failed [ 2276.798851][T25772] gspca_stk1135: serial bus timeout: status=0x00 [ 2276.819449][T25772] gspca_stk1135: Sensor write failed [ 2276.831730][T25772] gspca_stk1135: serial bus timeout: status=0x00 [ 2276.866555][T25772] gspca_stk1135: Sensor write failed [ 2276.926408][T25772] stk1135: probe of 4-1:25.0 failed with error -71 [ 2276.942943][T26960] ath6kl: Unsupported hardware version: 0x0 [ 2276.977228][T25772] usb 4-1: USB disconnect, device number 82 [ 2277.085644][ T2982] macvtap0: left allmulticast mode [ 2277.090844][ T2982] veth0_macvtap: left allmulticast mode [ 2277.133130][ T2982] macvtap0: left promiscuous mode [ 2277.154718][T26960] ath6kl: Failed to init ath6kl core: -22 [ 2277.278515][T26960] ath6kl_usb: probe of 5-1:0.64 failed with error -22 [ 2277.353900][T26960] usb 5-1: USB disconnect, device number 121 18:38:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0x10, 0xe1, {0xe1, 0x4, "6c9078ba537a865aad554bc54d27755ad39b236c328612162137b380d09f216a3cfd1335f92b1024f2b1ab22ef63e96297796fb642ba1686025aa13e275f6f36be36ef18190f128f3fcf03a4219d28747f7be0a208774346a6fbb072fd0aec5f7aa045c4784baeb37ea1d9019b555c0aef960e0c6febb8e8c8f125b8681359df83b83717b6eae212e3b8dcef33bda9f580d192049c17d070c34a610ddae9941e7892142d54694c4778deca0ff6e9938442c7a1267a56e233a9102c4e55deec5f9e99142b3a7f13921a013342589b0fce3a5c6f740842ba14bca7eccdcc8af6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x102f}}, &(0x7f0000000180)=ANY=[@ANYBLOB="0022ab460000050000002389"], &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x20, 0x1, {0x22, 0x9b0}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x13, 0xa8, "60c27f39b72a2aebd32745541f7a8d4a58fc28398afdacb9a3afdb76189cb3dd963aa04d3194b55499f45460b6c907586bf86a7675ec610b736118f5b60dba1ef4460885f23dbff568ee9c5dcf111e9bc0883af81b6206e5fa383e27c3358f68bef3753c2d2bf9ed10ecdd9d9d512582b9a8bd002e399a2d20c3434a7ad0ad3ed225388bba699151b87aedec70b4fc9df84bf8b3ee7cfa0b36943e5735eb4fee6a7bef0147a330bf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000380)={0x20, 0x1, 0x63, "845784f803dad83098d59f495fa12ffacf45299ac7ab3d744e6162d5ff58419958cbd06cc68816fb43266db87e0eaa27277d716f2fddc4a5764dc0cbbc882bf6d99c02adc4284dcf855946a888b69e61b1444a218b7d5b926ce8d1c382ac2695525f77"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xf0}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 18:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x144, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:46 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904400001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904400001a7a00f00090582020002"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 2277.633109][ T2994] xt_limit: Overflow, try lower: 1241513984/7 [ 2277.775299][ T2997] hub 9-0:1.0: USB hub found [ 2277.784449][ T2992] vlan2: entered promiscuous mode [ 2277.794340][ T2997] hub 9-0:1.0: 8 ports detected [ 2277.819121][ T2992] macvtap0: entered promiscuous mode [ 2277.832772][ T5178] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2277.859138][ T2992] vlan2: entered allmulticast mode [ 2277.878154][ T2992] macvtap0: entered allmulticast mode [ 2277.901503][ T2992] veth0_macvtap: entered allmulticast mode [ 2277.950223][ T2992] macvtap0: left allmulticast mode [ 2277.972919][ T2992] veth0_macvtap: left allmulticast mode [ 2277.995720][ T2992] macvtap0: left promiscuous mode [ 2278.042908][ T26] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2278.093245][ T5178] usb 4-1: Using ep0 maxpacket: 8 [ 2278.292851][ T5178] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 2278.321604][ T5178] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 2278.381043][ T5178] usb 4-1: Product: syz [ 2278.412936][ T26] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 2278.433036][ T26] usb 5-1: config 0 has no interface number 0 [ 2278.533221][ T5178] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2278.588311][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2278.629551][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.687271][ T26] usb 5-1: config 0 descriptor?? 18:38:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x148, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2279.192961][ T26] ath6kl: Unsupported hardware version: 0x0 [ 2279.262850][ T5178] gspca_stk1135: reg_w 0x7 err -71 [ 2279.270246][ T5178] gspca_stk1135: serial bus timeout: status=0x00 [ 2279.285472][ T3012] xt_limit: Overflow, try lower: 1241513984/7 [ 2279.324853][ T5178] gspca_stk1135: Sensor write failed [ 2279.352939][ T5178] gspca_stk1135: serial bus timeout: status=0x00 [ 2279.359525][ T5178] gspca_stk1135: Sensor write failed [ 2279.362542][ T3014] hub 9-0:1.0: USB hub found [ 2279.375472][ T3014] hub 9-0:1.0: 8 ports detected [ 2279.399543][ T2999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2279.424588][ T3012] vlan2: entered promiscuous mode [ 2279.430928][ T5178] gspca_stk1135: serial bus timeout: status=0x00 [ 2279.440391][ T3012] macvtap0: entered promiscuous mode [ 2279.441222][ T2999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.462143][ T5178] gspca_stk1135: Sensor read failed [ 2279.473272][ T5178] gspca_stk1135: serial bus timeout: status=0x00 [ 2279.479656][ T5178] gspca_stk1135: Sensor read failed [ 2279.485493][ T5178] gspca_stk1135: Detected sensor type unknown (0x0) [ 2279.485754][ T3012] vlan2: entered allmulticast mode [ 2279.499847][ T5178] gspca_stk1135: serial bus timeout: status=0x00 [ 2279.506676][ T5178] gspca_stk1135: Sensor read failed [ 2279.512129][ T5178] gspca_stk1135: serial bus timeout: status=0x00 [ 2279.519505][ T5178] gspca_stk1135: Sensor read failed [ 2279.525380][ T5178] gspca_stk1135: serial bus timeout: status=0x00 [ 2279.532165][ T5178] gspca_stk1135: Sensor write failed [ 2279.538000][ T3012] macvtap0: entered allmulticast mode [ 2279.554048][ T5178] gspca_stk1135: serial bus timeout: status=0x00 [ 2279.561000][ T5178] gspca_stk1135: Sensor write failed [ 2279.566890][ T5178] stk1135: probe of 4-1:25.0 failed with error -71 [ 2279.567056][ T3012] veth0_macvtap: entered allmulticast mode [ 2279.604281][ T5178] usb 4-1: USB disconnect, device number 83 [ 2279.636714][ T3012] macvtap0: left allmulticast mode [ 2279.644242][ T3012] veth0_macvtap: left allmulticast mode [ 2279.651587][ T3012] macvtap0: left promiscuous mode 18:38:48 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x5, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfc, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:48 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x7400, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:38:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x15c, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2279.835032][ T26] ath6kl: Failed to init ath6kl core: -22 [ 2279.969733][ T3026] xt_limit: Overflow, try lower: 1241513984/7 [ 2279.976681][ T3028] xt_limit: Overflow, try lower: 1241513984/7 [ 2279.990683][ T26] ath6kl_usb: probe of 5-1:0.64 failed with error -22 18:38:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2280.118419][ T3024] vlan2: entered promiscuous mode [ 2280.137674][ T3024] macvtap0: entered promiscuous mode [ 2280.178119][ T3024] vlan2: entered allmulticast mode [ 2280.209105][ T3024] macvtap0: entered allmulticast mode [ 2280.248081][ T3024] veth0_macvtap: entered allmulticast mode [ 2280.301156][ T3024] macvtap0: left allmulticast mode [ 2280.323104][ T3024] veth0_macvtap: left allmulticast mode [ 2280.341646][ T3024] macvtap0: left promiscuous mode 18:38:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xd2, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x160, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2280.704109][ T3047] xt_limit: Overflow, try lower: 1241513984/7 18:38:49 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904400001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904400001a7a00f00090582020002"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 2280.781458][ T26] usb 5-1: USB disconnect, device number 122 [ 2280.794329][ T3049] xt_limit: Overflow, try lower: 1241513984/7 18:38:49 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x7a00, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:38:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x0, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xbc, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2281.094800][ T3048] vlan2: entered promiscuous mode [ 2281.150482][ T3048] macvtap0: entered promiscuous mode [ 2281.177397][ T3048] vlan2: entered allmulticast mode [ 2281.188889][ T3066] hub 9-0:1.0: USB hub found [ 2281.197960][ T3048] macvtap0: entered allmulticast mode [ 2281.203890][ T3068] xt_limit: Overflow, try lower: 1241513984/7 [ 2281.211427][ T3048] veth0_macvtap: entered allmulticast mode [ 2281.226049][ T3066] hub 9-0:1.0: 8 ports detected [ 2281.243094][ T3048] macvtap0: left allmulticast mode [ 2281.258665][ T3048] veth0_macvtap: left allmulticast mode [ 2281.280595][ T3048] macvtap0: left promiscuous mode [ 2281.292735][ T26] usb 5-1: new high-speed USB device number 123 using dummy_hcd 18:38:50 executing program 3: syz_clone(0x40000100, 0x0, 0x0, &(0x7f0000001000), &(0x7f0000001040), 0x0) syz_clone(0x6800, &(0x7f0000000000)="468b95995a8a655431f77416dc4f9e7a4d324440d14c9616846c587d3f5a9dc5004eb9b1a136a51a7f3ee48f3f49f9ed86a3d965bc05e7adc26a83fb7c23e856e013e9d9a7e40d651518f78e4da23ad07d5fa7dd37d6ed683e833756f79d9ed3c59c64305f12c7892efdea98265744257810b36959558bc37e120ccac041011fa7f7718e2355362ef9f765e49800082a8e5e27a0fbd7aab9f562d9e0e3381f7fba33f4ac99891222d1e6ed31a56423b95a81", 0xb2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="bc5d646471fdcf859cd0384f8616822edc2ec39fdf4d39947bc5422231255a7c5c3699602d928ab9e60f12cefd3ccaa5858e362cd74f47f50cac2b4ba93b9a33713a6c75237a9d67a8ae52efe55b000049251fa49059d1acd5db80159245142d142fa70f10cab9e5d91a9b63d8f526e68b6ae522218598c5963077c3a613adaa063274f4f2495d3e3ff60b961624b16dd54a2039951918e37190d8") [ 2281.663125][ T26] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 2281.678252][ T26] usb 5-1: config 0 has no interface number 0 [ 2281.692448][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2281.713439][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.750750][ T26] usb 5-1: config 0 descriptor?? [ 2282.242918][ T26] ath6kl: Unsupported hardware version: 0x0 [ 2282.447576][ T3055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2282.523755][ T3055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.883779][ T26] ath6kl: Failed to init ath6kl core: -22 [ 2282.930191][ T26] ath6kl_usb: probe of 5-1:0.64 failed with error -22 [ 2283.930622][T25911] usb 5-1: USB disconnect, device number 123 18:38:53 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xb539, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:38:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x186, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x0, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:38:53 executing program 3: syz_clone(0x40000100, 0x0, 0x0, &(0x7f0000001000), &(0x7f0000001040), 0x0) (async) syz_clone(0x6800, &(0x7f0000000000)="468b95995a8a655431f77416dc4f9e7a4d324440d14c9616846c587d3f5a9dc5004eb9b1a136a51a7f3ee48f3f49f9ed86a3d965bc05e7adc26a83fb7c23e856e013e9d9a7e40d651518f78e4da23ad07d5fa7dd37d6ed683e833756f79d9ed3c59c64305f12c7892efdea98265744257810b36959558bc37e120ccac041011fa7f7718e2355362ef9f765e49800082a8e5e27a0fbd7aab9f562d9e0e3381f7fba33f4ac99891222d1e6ed31a56423b95a81", 0xb2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="bc5d646471fdcf859cd0384f8616822edc2ec39fdf4d39947bc5422231255a7c5c3699602d928ab9e60f12cefd3ccaa5858e362cd74f47f50cac2b4ba93b9a33713a6c75237a9d67a8ae52efe55b000049251fa49059d1acd5db80159245142d142fa70f10cab9e5d91a9b63d8f526e68b6ae522218598c5963077c3a613adaa063274f4f2495d3e3ff60b961624b16dd54a2039951918e37190d8") 18:38:53 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x1, 0x1c, {0x1c, 0x4, "6288fb3557e659c94a712da854b7cb04e3a8c4af847c5895e302"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "20d1835a"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0xff, 0x1, {0x22, 0x2aa}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x12, 0xe6, "29c6243e6cb6045b6371e97e0631f37c2e835ba8ebd451d15530f3324b4e044c971f61b683c8b2ebb7b2cbf460d0851f3a1894f033d1d78d7b76222010eb26bbe5ae3c021f2343befedb26be9a105702e0d6b648d424379277f99678b8c66027f38658dee515c7dc5db0642c27f47f58a7d676cc48a556ee025ae61c7e08449287dea8935fb237d45fc833edca9f52dce1246a149d2e6977e75e8ed03d58f83ecd1dc62c1a0b04768ea9519be8d74512e5344b66ce371fb9c66eefe37cbe62e2af4e12c117fdfb7cb11f9f7b3aabe55ab8857f663f8454b56f831feb648e7456edb0d14bc5d2"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x1, 0x7, "ba396a3d7f66c5"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x6}}) [ 2284.364120][ T3098] xt_limit: Overflow, try lower: 1241513984/7 [ 2284.427738][ T3099] hub 9-0:1.0: USB hub found [ 2284.455433][ T3099] hub 9-0:1.0: 8 ports detected [ 2284.476566][ T3098] vlan2: entered promiscuous mode [ 2284.495853][ T3098] macvtap0: entered promiscuous mode [ 2284.514097][ T3098] vlan2: entered allmulticast mode [ 2284.553504][ T3098] macvtap0: entered allmulticast mode [ 2284.562910][T20101] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2284.602208][ T3098] veth0_macvtap: entered allmulticast mode [ 2284.646174][ T3098] macvtap0: left allmulticast mode [ 2284.665853][ T3098] veth0_macvtap: left allmulticast mode [ 2284.690720][ T3098] macvtap0: left promiscuous mode 18:38:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x1b0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2284.992992][T20101] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2285.020269][T20101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:38:53 executing program 3: syz_clone(0x40000100, 0x0, 0x0, &(0x7f0000001000), &(0x7f0000001040), 0x0) syz_clone(0x6800, &(0x7f0000000000)="468b95995a8a655431f77416dc4f9e7a4d324440d14c9616846c587d3f5a9dc5004eb9b1a136a51a7f3ee48f3f49f9ed86a3d965bc05e7adc26a83fb7c23e856e013e9d9a7e40d651518f78e4da23ad07d5fa7dd37d6ed683e833756f79d9ed3c59c64305f12c7892efdea98265744257810b36959558bc37e120ccac041011fa7f7718e2355362ef9f765e49800082a8e5e27a0fbd7aab9f562d9e0e3381f7fba33f4ac99891222d1e6ed31a56423b95a81", 0xb2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="bc5d646471fdcf859cd0384f8616822edc2ec39fdf4d39947bc5422231255a7c5c3699602d928ab9e60f12cefd3ccaa5858e362cd74f47f50cac2b4ba93b9a33713a6c75237a9d67a8ae52efe55b000049251fa49059d1acd5db80159245142d142fa70f10cab9e5d91a9b63d8f526e68b6ae522218598c5963077c3a613adaa063274f4f2495d3e3ff60b961624b16dd54a2039951918e37190d8") syz_clone(0x40000100, 0x0, 0x0, &(0x7f0000001000), &(0x7f0000001040), 0x0) (async) syz_clone(0x6800, &(0x7f0000000000)="468b95995a8a655431f77416dc4f9e7a4d324440d14c9616846c587d3f5a9dc5004eb9b1a136a51a7f3ee48f3f49f9ed86a3d965bc05e7adc26a83fb7c23e856e013e9d9a7e40d651518f78e4da23ad07d5fa7dd37d6ed683e833756f79d9ed3c59c64305f12c7892efdea98265744257810b36959558bc37e120ccac041011fa7f7718e2355362ef9f765e49800082a8e5e27a0fbd7aab9f562d9e0e3381f7fba33f4ac99891222d1e6ed31a56423b95a81", 0xb2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="bc5d646471fdcf859cd0384f8616822edc2ec39fdf4d39947bc5422231255a7c5c3699602d928ab9e60f12cefd3ccaa5858e362cd74f47f50cac2b4ba93b9a33713a6c75237a9d67a8ae52efe55b000049251fa49059d1acd5db80159245142d142fa70f10cab9e5d91a9b63d8f526e68b6ae522218598c5963077c3a613adaa063274f4f2495d3e3ff60b961624b16dd54a2039951918e37190d8") (async) [ 2285.134394][T20101] usb 5-1: config 0 descriptor?? [ 2285.145709][ T3116] xt_limit: Overflow, try lower: 1241513984/7 18:38:54 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x7, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2285.307665][ T3116] vlan2: entered promiscuous mode [ 2285.317260][ T3116] macvtap0: entered promiscuous mode [ 2285.323520][ T3116] vlan2: entered allmulticast mode [ 2285.333718][ T3116] macvtap0: entered allmulticast mode [ 2285.351098][ T3116] veth0_macvtap: entered allmulticast mode [ 2285.380500][ T3116] macvtap0: left allmulticast mode [ 2285.400591][ T3116] veth0_macvtap: left allmulticast mode [ 2285.412319][ T3116] macvtap0: left promiscuous mode 18:38:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x1c2, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2285.663296][T20101] ath6kl: Unsupported hardware version: 0x0 [ 2285.701048][ T3130] xt_limit: Overflow, try lower: 1241513984/7 [ 2285.844655][ T3130] vlan2: entered promiscuous mode [ 2285.859037][ T3130] macvtap0: entered promiscuous mode [ 2285.875163][ T3130] vlan2: entered allmulticast mode [ 2285.891107][ T3130] macvtap0: entered allmulticast mode [ 2285.907750][ T3130] veth0_macvtap: entered allmulticast mode [ 2285.960120][ T3130] macvtap0: left allmulticast mode [ 2285.972983][ T3130] veth0_macvtap: left allmulticast mode [ 2285.979304][ T3130] macvtap0: left promiscuous mode 18:38:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x1c5, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2286.301294][ T3135] xt_limit: Overflow, try lower: 1241513984/7 [ 2286.385322][T20101] ath6kl: Failed to init ath6kl core: -22 [ 2286.415206][ T3134] vlan2: entered promiscuous mode [ 2286.469345][ T3134] macvtap0: entered promiscuous mode [ 2286.478814][T20101] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2286.530674][ T3134] vlan2: entered allmulticast mode [ 2286.561445][ T3134] macvtap0: entered allmulticast mode [ 2286.583815][ T3134] veth0_macvtap: entered allmulticast mode [ 2286.618648][ T3134] macvtap0: left allmulticast mode [ 2286.632826][ T3134] veth0_macvtap: left allmulticast mode [ 2286.638556][ T3134] macvtap0: left promiscuous mode 18:38:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x1ce, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2287.017461][ T3139] xt_limit: Overflow, try lower: 1241513984/7 [ 2287.129482][ T3138] vlan2: entered promiscuous mode [ 2287.149264][ T3138] macvtap0: entered promiscuous mode [ 2287.178894][ T3138] vlan2: entered allmulticast mode [ 2287.197657][ T3138] macvtap0: entered allmulticast mode [ 2287.225204][ T3138] veth0_macvtap: entered allmulticast mode 18:38:56 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x1, 0x1c, {0x1c, 0x4, "6288fb3557e659c94a712da854b7cb04e3a8c4af847c5895e302"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "20d1835a"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0xff, 0x1, {0x22, 0x2aa}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x12, 0xe6, "29c6243e6cb6045b6371e97e0631f37c2e835ba8ebd451d15530f3324b4e044c971f61b683c8b2ebb7b2cbf460d0851f3a1894f033d1d78d7b76222010eb26bbe5ae3c021f2343befedb26be9a105702e0d6b648d424379277f99678b8c66027f38658dee515c7dc5db0642c27f47f58a7d676cc48a556ee025ae61c7e08449287dea8935fb237d45fc833edca9f52dce1246a149d2e6977e75e8ed03d58f83ecd1dc62c1a0b04768ea9519be8d74512e5344b66ce371fb9c66eefe37cbe62e2af4e12c117fdfb7cb11f9f7b3aabe55ab8857f663f8454b56f831feb648e7456edb0d14bc5d2"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x1, 0x7, "ba396a3d7f66c5"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x6}}) [ 2287.271357][ T3138] macvtap0: left allmulticast mode [ 2287.284427][T20101] usb 5-1: USB disconnect, device number 124 [ 2287.320953][ T3138] veth0_macvtap: left allmulticast mode [ 2287.347922][ T3138] macvtap0: left promiscuous mode [ 2287.782774][T20101] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2288.134330][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.140690][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.202904][T20101] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2288.212151][T20101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.293217][T20101] usb 5-1: config 0 descriptor?? [ 2288.603117][T20101] ath6kl: Unsupported hardware version: 0x5b04b66c [ 2289.363762][T20101] ath6kl: Failed to init ath6kl core: -22 [ 2289.486051][T20101] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2290.354952][T20101] usb 5-1: USB disconnect, device number 125 18:38:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xb639, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:38:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x1d4, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:38:59 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x1, 0x1c, {0x1c, 0x4, "6288fb3557e659c94a712da854b7cb04e3a8c4af847c5895e302"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "20d1835a"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0xff, 0x1, {0x22, 0x2aa}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x12, 0xe6, "29c6243e6cb6045b6371e97e0631f37c2e835ba8ebd451d15530f3324b4e044c971f61b683c8b2ebb7b2cbf460d0851f3a1894f033d1d78d7b76222010eb26bbe5ae3c021f2343befedb26be9a105702e0d6b648d424379277f99678b8c66027f38658dee515c7dc5db0642c27f47f58a7d676cc48a556ee025ae61c7e08449287dea8935fb237d45fc833edca9f52dce1246a149d2e6977e75e8ed03d58f83ecd1dc62c1a0b04768ea9519be8d74512e5344b66ce371fb9c66eefe37cbe62e2af4e12c117fdfb7cb11f9f7b3aabe55ab8857f663f8454b56f831feb648e7456edb0d14bc5d2"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x1, 0x7, "ba396a3d7f66c5"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x6}}) 18:38:59 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x0, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2291.106692][ T3152] xt_limit: Overflow, try lower: 1241513984/7 [ 2291.164916][ T3155] hub 9-0:1.0: USB hub found [ 2291.181674][ T3155] hub 9-0:1.0: 8 ports detected [ 2291.233234][ T3150] vlan2: entered promiscuous mode [ 2291.264266][ T3150] macvtap0: entered promiscuous mode [ 2291.284556][ T3150] vlan2: entered allmulticast mode [ 2291.293036][T25911] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2291.300910][ T3150] macvtap0: entered allmulticast mode [ 2291.306736][ T3150] veth0_macvtap: entered allmulticast mode [ 2291.322131][ T3150] macvtap0: left allmulticast mode [ 2291.333762][ T3150] veth0_macvtap: left allmulticast mode [ 2291.346310][ T3150] macvtap0: left promiscuous mode 18:39:00 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x8, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x1ea, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2291.673128][T25911] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2291.686871][T25911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.696450][ T3164] xt_limit: Overflow, try lower: 1241513984/7 [ 2291.746670][T25911] usb 5-1: config 0 descriptor?? [ 2291.820092][ T3164] vlan2: entered promiscuous mode [ 2291.837548][ T3164] macvtap0: entered promiscuous mode [ 2291.857671][ T3164] vlan2: entered allmulticast mode [ 2291.878346][ T3164] macvtap0: entered allmulticast mode [ 2291.884390][ T3164] veth0_macvtap: entered allmulticast mode [ 2291.898293][ T3164] macvtap0: left allmulticast mode [ 2291.903734][ T3164] veth0_macvtap: left allmulticast mode [ 2291.909687][ T3164] macvtap0: left promiscuous mode [ 2292.243224][T25911] ath6kl: Unsupported hardware version: 0x0 18:39:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x0, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xf000, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:39:01 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x0, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x1fa, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2292.437154][ T3185] xt_limit: Overflow, try lower: 1241513984/7 [ 2292.540011][ T3185] vlan2: entered promiscuous mode [ 2292.559900][ T3185] macvtap0: entered promiscuous mode [ 2292.586836][ T3185] vlan2: entered allmulticast mode [ 2292.625343][ T3185] macvtap0: entered allmulticast mode [ 2292.654508][ T3185] veth0_macvtap: entered allmulticast mode [ 2292.716558][ T3185] macvtap0: left allmulticast mode [ 2292.734042][ T3185] veth0_macvtap: left allmulticast mode [ 2292.752313][ T3185] macvtap0: left promiscuous mode [ 2292.886780][T25911] ath6kl: Failed to init ath6kl core: -22 18:39:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x203, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:01 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xa, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2293.134417][T25911] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 2293.248519][ T3199] xt_limit: Overflow, try lower: 1241513984/7 18:39:02 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x0, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2293.406982][ T3198] vlan2: entered promiscuous mode [ 2293.424875][ T3198] macvtap0: entered promiscuous mode [ 2293.449537][ T3198] vlan2: entered allmulticast mode [ 2293.472799][ T3198] macvtap0: entered allmulticast mode [ 2293.488169][ T3198] veth0_macvtap: entered allmulticast mode [ 2293.527604][ T3209] hub 9-0:1.0: USB hub found [ 2293.534960][ T3209] hub 9-0:1.0: 8 ports detected [ 2293.576067][ T3198] macvtap0: left allmulticast mode [ 2293.592712][ T3198] veth0_macvtap: left allmulticast mode [ 2293.618096][ T3198] macvtap0: left promiscuous mode 18:39:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x212, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:02 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000500)={0x0, 0x31, 0xea, {0xea, 0x8, "a53c9d36fb02aed11571e3d4a05ce05cff41c5c4c8db49f46c4df36e7e2742c2c7bf4f4b7fa96d937c3a9449705d3f95c8dff8ca3161a66e55cdc0efb91f02c612de3b36551a7ed1797c2a5a53ae77c2aca35c34d769aa643193941a507376170ed48fc53915c58262aa5ecba27791bee7cab82e63aaa595e489abd6e28612c9c0317328f4dbc7a70d6fab5e9fb20e22975dcd817a2cbf38f9c2c2467d4a512669368ed17fc42922b98ebe5346d09000bf89d23c575e249f631101c911ad9c9e2d46fe3fb8aa99a822eaf2d5330532a4c3bd7f40298259b72944c0aab8966fb1cd67b349c6af4e5c"}}, &(0x7f0000000600)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "a43289cacb42ce77c01785ad88fac2809a8ea5547a38561ac279efa0eaa375563478a241d0a6ddd1c941e72e0ab3cc2238b0c6ae38347f21d8dfa0a836299c0e58d5c3ca874073df7b5fcfc44f1afcf4e377b3cef155d1d0d0d804d8aa4deb06df721a37924049119871cd84c6f22238da3429b0c3a945e72e0a162bb057ad564625999c7edd0136dc447563712bc18263a56f34980d73c22d7d510a77ff93a6fef794c3fcace36011dd8813f379548b395cf425257e2d485e737f766bbcefdf21f78e9811f913ee56faac35541310c615d8284c9df3959963852133475999e69fd1f968d241bbe844045dee3131"}}, &(0x7f0000000700)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x90, 0x9, 0x996d, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0x8, 0x0, 0x6, [0x3f00]}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x8, 0x20, "c37c46b3", "0267c901"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x3, 0x90, 0x3f, 0x200, 0x1}}}, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x20, 0x17, 0xec, "d49809ec59ebca5daba370c0aff8bb9c1ec1f96e4f2c633fd4689bd31fca67b8b3a8c40a72ff3302fddee257043e4dcd0303fb099782595597f3c3a4120a850c625539056228d73228b4d95c569420b68757d4bff304cb57403ef869aade1d3b1ff869912bdcfa3597afeb11cc9a8fd070ed401c2c78e430b1bb6f9bb8a8b5eeec2213576613d6fac78c3c5da23e42902a81cd1aa8ced24da9d2e8c336ac26268224978882e6e6c364a6d75ea83c79a8e530dade43ac76503448cb4a7579641888754679f1a4fc3a45fe11f71bc609592aa4b6908fbe142a107366b0efc4c485433f5afb10464ec623112504"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x800, 0x20, [0xff0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x89}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "9cb3"}, &(0x7f0000000b80)={0x40, 0xf, 0x2}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "83a2"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x4c4}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x0, 0xb, 0x86, {0x86, 0xe, "ecdfd1b8c52044bd02095086a43762ffbd6430e2b264a0333842b7f141c1470f6f3aa754bb73d6f208d1008a94dd85c6d4caa5a6598060536f146e8d076e4c7e8e85eedfa3870cd940adb4d25cc434a289b4c390d0f54b174797b6bc76f32ba1d1a789af982f5ffd5023db8544b2026f753635d515b6ba7f2b7e933f37756a8dc46e8a51"}}, &(0x7f0000000140)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "155103e6ef9297ed5ef33320cab985fe771953242cb698f4d28ebd222f872a6402d57a8fd7adc1f2959ccce02ceeba0e05cc159bc9db7637fcf04d8bb33aeffa88d49a008218eea612a482214b5c433631a9a25c41fadaaa46b377bbbd7349064a2801bc58a6b50ae380ead355a85645dc7360981e1d7690a8aa2c274b301d261eefdf336c50fae74788bd8c17f29aeef63b9cd4a983f91f1e1ab4ab655057e6033717c1c7e18127042bda25920052682bf21175ba996b7510cdc5c99c3e5e2f95d2099d5f70"}}, &(0x7f0000000000)={0x0, 0x22, 0x1c, {[@global=@item_012={0x1, 0x1, 0x6, '&'}, @local=@item_012={0x2, 0x2, 0x8, "a697"}, @local, @local=@item_4={0x3, 0x2, 0xc, "6b5dde89"}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_012={0x2, 0x2, 0x0, "b5b3"}, @local=@item_012={0x2, 0x2, 0x8, "012a"}, @main=@item_4={0x3, 0x0, 0xb, "e84e9853"}, @global=@item_4={0x3, 0x1, 0x4, "b4c9dca9"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x9, 0x1, {0x22, 0x85c}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x21, 0x27, "85b1ed1706e8b357a06cc67fc4193cf5b2238570097270a32eafe10e8162b6c02ede75b143ba93"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x1, 0xa1, "e60aa82c9aaae6038e215fc7e446bf3e71f92d99a4ad3c71a8c2841dd73582139a845173cf08974bdd69c35d0c26fc93e347981c8d245dcaa4fbbca88c59c4460e47cb0aeb7f9c069ff805bb0d1f9c2f452be1263458c0d337134f1954f4c42215e7a0fa2eb6ec72cb2a08dfd1a00d26af8ddac578c0ad41539081b71479445a038a3c87dfe50c89f4560b114257efd18c553e397173d92a043b61309345da6c6a"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xe6}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2294.014093][ T3216] xt_limit: Overflow, try lower: 1241513984/7 [ 2294.026165][T17965] usb 5-1: USB disconnect, device number 126 [ 2294.191997][ T3216] vlan2: entered promiscuous mode [ 2294.214323][ T3216] macvtap0: entered promiscuous mode 18:39:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x203, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2294.253065][ T3216] vlan2: entered allmulticast mode [ 2294.258654][ T3216] macvtap0: entered allmulticast mode [ 2294.271658][ T3216] veth0_macvtap: entered allmulticast mode [ 2294.315907][ T3216] macvtap0: left allmulticast mode [ 2294.329934][ T3216] veth0_macvtap: left allmulticast mode [ 2294.355165][ T3216] macvtap0: left promiscuous mode [ 2294.403197][ T3223] xt_limit: Overflow, try lower: 1241513984/7 18:39:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x21a, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2294.562971][T17965] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2294.707742][ T3226] xt_limit: Overflow, try lower: 1241513984/7 18:39:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x1fa, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2294.762851][T17965] usb 5-1: device descriptor read/64, error 18 [ 2294.894572][ T3225] vlan2: entered promiscuous mode [ 2294.909052][ T3225] macvtap0: entered promiscuous mode [ 2294.928812][ T3225] vlan2: entered allmulticast mode [ 2294.952610][ T3225] macvtap0: entered allmulticast mode [ 2294.974002][ T3225] veth0_macvtap: entered allmulticast mode [ 2295.042983][T17965] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2295.054893][ T3225] macvtap0: left allmulticast mode [ 2295.060208][ T3225] veth0_macvtap: left allmulticast mode [ 2295.084709][ T3225] macvtap0: left promiscuous mode [ 2295.243057][T17965] usb 5-1: device descriptor read/64, error 18 [ 2295.362996][T17965] usb usb5-port1: attempt power cycle [ 2295.391742][ T3229] xt_limit: Overflow, try lower: 1241513984/7 [ 2295.772791][T17965] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2295.963346][T17965] usb 5-1: device descriptor read/8, error -61 [ 2296.232738][T17965] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2296.412982][T17965] usb 5-1: device descriptor read/8, error -61 [ 2296.535145][T17965] usb usb5-port1: unable to enumerate USB device 18:39:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x0, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x242, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:07 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000500)={0x0, 0x31, 0xea, {0xea, 0x8, "a53c9d36fb02aed11571e3d4a05ce05cff41c5c4c8db49f46c4df36e7e2742c2c7bf4f4b7fa96d937c3a9449705d3f95c8dff8ca3161a66e55cdc0efb91f02c612de3b36551a7ed1797c2a5a53ae77c2aca35c34d769aa643193941a507376170ed48fc53915c58262aa5ecba27791bee7cab82e63aaa595e489abd6e28612c9c0317328f4dbc7a70d6fab5e9fb20e22975dcd817a2cbf38f9c2c2467d4a512669368ed17fc42922b98ebe5346d09000bf89d23c575e249f631101c911ad9c9e2d46fe3fb8aa99a822eaf2d5330532a4c3bd7f40298259b72944c0aab8966fb1cd67b349c6af4e5c"}}, &(0x7f0000000600)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "a43289cacb42ce77c01785ad88fac2809a8ea5547a38561ac279efa0eaa375563478a241d0a6ddd1c941e72e0ab3cc2238b0c6ae38347f21d8dfa0a836299c0e58d5c3ca874073df7b5fcfc44f1afcf4e377b3cef155d1d0d0d804d8aa4deb06df721a37924049119871cd84c6f22238da3429b0c3a945e72e0a162bb057ad564625999c7edd0136dc447563712bc18263a56f34980d73c22d7d510a77ff93a6fef794c3fcace36011dd8813f379548b395cf425257e2d485e737f766bbcefdf21f78e9811f913ee56faac35541310c615d8284c9df3959963852133475999e69fd1f968d241bbe844045dee3131"}}, &(0x7f0000000700)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x90, 0x9, 0x996d, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0x8, 0x0, 0x6, [0x3f00]}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x8, 0x20, "c37c46b3", "0267c901"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x3, 0x90, 0x3f, 0x200, 0x1}}}, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x20, 0x17, 0xec, "d49809ec59ebca5daba370c0aff8bb9c1ec1f96e4f2c633fd4689bd31fca67b8b3a8c40a72ff3302fddee257043e4dcd0303fb099782595597f3c3a4120a850c625539056228d73228b4d95c569420b68757d4bff304cb57403ef869aade1d3b1ff869912bdcfa3597afeb11cc9a8fd070ed401c2c78e430b1bb6f9bb8a8b5eeec2213576613d6fac78c3c5da23e42902a81cd1aa8ced24da9d2e8c336ac26268224978882e6e6c364a6d75ea83c79a8e530dade43ac76503448cb4a7579641888754679f1a4fc3a45fe11f71bc609592aa4b6908fbe142a107366b0efc4c485433f5afb10464ec623112504"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x800, 0x20, [0xff0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x89}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "9cb3"}, &(0x7f0000000b80)={0x40, 0xf, 0x2}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "83a2"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x4c4}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x0, 0xb, 0x86, {0x86, 0xe, "ecdfd1b8c52044bd02095086a43762ffbd6430e2b264a0333842b7f141c1470f6f3aa754bb73d6f208d1008a94dd85c6d4caa5a6598060536f146e8d076e4c7e8e85eedfa3870cd940adb4d25cc434a289b4c390d0f54b174797b6bc76f32ba1d1a789af982f5ffd5023db8544b2026f753635d515b6ba7f2b7e933f37756a8dc46e8a51"}}, &(0x7f0000000140)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "155103e6ef9297ed5ef33320cab985fe771953242cb698f4d28ebd222f872a6402d57a8fd7adc1f2959ccce02ceeba0e05cc159bc9db7637fcf04d8bb33aeffa88d49a008218eea612a482214b5c433631a9a25c41fadaaa46b377bbbd7349064a2801bc58a6b50ae380ead355a85645dc7360981e1d7690a8aa2c274b301d261eefdf336c50fae74788bd8c17f29aeef63b9cd4a983f91f1e1ab4ab655057e6033717c1c7e18127042bda25920052682bf21175ba996b7510cdc5c99c3e5e2f95d2099d5f70"}}, &(0x7f0000000000)={0x0, 0x22, 0x1c, {[@global=@item_012={0x1, 0x1, 0x6, '&'}, @local=@item_012={0x2, 0x2, 0x8, "a697"}, @local, @local=@item_4={0x3, 0x2, 0xc, "6b5dde89"}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_012={0x2, 0x2, 0x0, "b5b3"}, @local=@item_012={0x2, 0x2, 0x8, "012a"}, @main=@item_4={0x3, 0x0, 0xb, "e84e9853"}, @global=@item_4={0x3, 0x1, 0x4, "b4c9dca9"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x9, 0x1, {0x22, 0x85c}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x21, 0x27, "85b1ed1706e8b357a06cc67fc4193cf5b2238570097270a32eafe10e8162b6c02ede75b143ba93"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x1, 0xa1, "e60aa82c9aaae6038e215fc7e446bf3e71f92d99a4ad3c71a8c2841dd73582139a845173cf08974bdd69c35d0c26fc93e347981c8d245dcaa4fbbca88c59c4460e47cb0aeb7f9c069ff805bb0d1f9c2f452be1263458c0d337134f1954f4c42215e7a0fa2eb6ec72cb2a08dfd1a00d26af8ddac578c0ad41539081b71479445a038a3c87dfe50c89f4560b114257efd18c553e397173d92a043b61309345da6c6a"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xe6}}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:39:07 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x0, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xff00, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:39:07 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x10, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2298.857167][ T3243] xt_limit: Overflow, try lower: 1241513984/7 [ 2298.906835][ T3244] hub 9-0:1.0: USB hub found [ 2298.935727][ T3244] hub 9-0:1.0: 8 ports detected [ 2298.986061][ T3237] vlan2: entered promiscuous mode [ 2298.997126][ T3237] macvtap0: entered promiscuous mode [ 2299.009825][ T3237] vlan2: entered allmulticast mode [ 2299.022951][ T3237] macvtap0: entered allmulticast mode [ 2299.068486][ T3237] veth0_macvtap: entered allmulticast mode [ 2299.072758][T25911] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2299.128059][ T3237] macvtap0: left allmulticast mode [ 2299.157344][ T3237] veth0_macvtap: left allmulticast mode [ 2299.195716][ T3237] macvtap0: left promiscuous mode [ 2299.272812][T25911] usb 5-1: device descriptor read/64, error 18 18:39:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x24a, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2299.543339][T25911] usb 5-1: new high-speed USB device number 6 using dummy_hcd 18:39:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x20000, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:39:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x0, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2299.667399][ T3268] xt_limit: Overflow, try lower: 1241513984/7 18:39:08 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0x0, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2299.743041][T25911] usb 5-1: device descriptor read/64, error 18 [ 2299.817043][ T3268] vlan2: entered promiscuous mode [ 2299.832511][ T3268] macvtap0: entered promiscuous mode [ 2299.852337][ T3268] vlan2: entered allmulticast mode [ 2299.862929][T25911] usb usb5-port1: attempt power cycle [ 2299.908269][ T3268] macvtap0: entered allmulticast mode [ 2299.932732][ T3268] veth0_macvtap: entered allmulticast mode [ 2299.968101][ T3279] hub 9-0:1.0: USB hub found [ 2299.989746][ T3279] hub 9-0:1.0: 8 ports detected [ 2300.021801][ T3268] macvtap0: left allmulticast mode [ 2300.031855][ T3268] veth0_macvtap: left allmulticast mode [ 2300.062837][ T3268] macvtap0: left promiscuous mode 18:39:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x25c, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2300.272933][T25911] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2300.430375][ T3288] xt_limit: Overflow, try lower: 1241513984/7 [ 2300.473060][T25911] usb 5-1: device descriptor read/8, error -61 [ 2300.594916][ T3288] vlan2: entered promiscuous mode 18:39:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xeaf81, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) [ 2300.626199][ T3288] macvtap0: entered promiscuous mode 18:39:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x0, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2300.686163][ T3288] vlan2: entered allmulticast mode [ 2300.691835][ T3288] macvtap0: entered allmulticast mode [ 2300.699038][ T3288] veth0_macvtap: entered allmulticast mode [ 2300.711093][ T3288] macvtap0: left allmulticast mode [ 2300.716668][ T3288] veth0_macvtap: left allmulticast mode [ 2300.729551][ T3288] macvtap0: left promiscuous mode 18:39:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x24a, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2300.742813][T25911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2300.891340][ T3305] xt_limit: Overflow, try lower: 1241513984/7 [ 2300.923030][T25911] usb 5-1: device descriptor read/8, error -61 [ 2300.989561][ T3309] hub 9-0:1.0: USB hub found [ 2301.010549][ T3309] hub 9-0:1.0: 8 ports detected [ 2301.052933][T25911] usb usb5-port1: unable to enumerate USB device 18:39:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000500)={0x0, 0x31, 0xea, {0xea, 0x8, "a53c9d36fb02aed11571e3d4a05ce05cff41c5c4c8db49f46c4df36e7e2742c2c7bf4f4b7fa96d937c3a9449705d3f95c8dff8ca3161a66e55cdc0efb91f02c612de3b36551a7ed1797c2a5a53ae77c2aca35c34d769aa643193941a507376170ed48fc53915c58262aa5ecba27791bee7cab82e63aaa595e489abd6e28612c9c0317328f4dbc7a70d6fab5e9fb20e22975dcd817a2cbf38f9c2c2467d4a512669368ed17fc42922b98ebe5346d09000bf89d23c575e249f631101c911ad9c9e2d46fe3fb8aa99a822eaf2d5330532a4c3bd7f40298259b72944c0aab8966fb1cd67b349c6af4e5c"}}, &(0x7f0000000600)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "a43289cacb42ce77c01785ad88fac2809a8ea5547a38561ac279efa0eaa375563478a241d0a6ddd1c941e72e0ab3cc2238b0c6ae38347f21d8dfa0a836299c0e58d5c3ca874073df7b5fcfc44f1afcf4e377b3cef155d1d0d0d804d8aa4deb06df721a37924049119871cd84c6f22238da3429b0c3a945e72e0a162bb057ad564625999c7edd0136dc447563712bc18263a56f34980d73c22d7d510a77ff93a6fef794c3fcace36011dd8813f379548b395cf425257e2d485e737f766bbcefdf21f78e9811f913ee56faac35541310c615d8284c9df3959963852133475999e69fd1f968d241bbe844045dee3131"}}, &(0x7f0000000700)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x90, 0x9, 0x996d, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0x8, 0x0, 0x6, [0x3f00]}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x8, 0x20, "c37c46b3", "0267c901"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x3, 0x90, 0x3f, 0x200, 0x1}}}, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x20, 0x17, 0xec, "d49809ec59ebca5daba370c0aff8bb9c1ec1f96e4f2c633fd4689bd31fca67b8b3a8c40a72ff3302fddee257043e4dcd0303fb099782595597f3c3a4120a850c625539056228d73228b4d95c569420b68757d4bff304cb57403ef869aade1d3b1ff869912bdcfa3597afeb11cc9a8fd070ed401c2c78e430b1bb6f9bb8a8b5eeec2213576613d6fac78c3c5da23e42902a81cd1aa8ced24da9d2e8c336ac26268224978882e6e6c364a6d75ea83c79a8e530dade43ac76503448cb4a7579641888754679f1a4fc3a45fe11f71bc609592aa4b6908fbe142a107366b0efc4c485433f5afb10464ec623112504"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x800, 0x20, [0xff0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x89}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "9cb3"}, &(0x7f0000000b80)={0x40, 0xf, 0x2}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "83a2"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x4c4}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x0, 0xb, 0x86, {0x86, 0xe, "ecdfd1b8c52044bd02095086a43762ffbd6430e2b264a0333842b7f141c1470f6f3aa754bb73d6f208d1008a94dd85c6d4caa5a6598060536f146e8d076e4c7e8e85eedfa3870cd940adb4d25cc434a289b4c390d0f54b174797b6bc76f32ba1d1a789af982f5ffd5023db8544b2026f753635d515b6ba7f2b7e933f37756a8dc46e8a51"}}, &(0x7f0000000140)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "155103e6ef9297ed5ef33320cab985fe771953242cb698f4d28ebd222f872a6402d57a8fd7adc1f2959ccce02ceeba0e05cc159bc9db7637fcf04d8bb33aeffa88d49a008218eea612a482214b5c433631a9a25c41fadaaa46b377bbbd7349064a2801bc58a6b50ae380ead355a85645dc7360981e1d7690a8aa2c274b301d261eefdf336c50fae74788bd8c17f29aeef63b9cd4a983f91f1e1ab4ab655057e6033717c1c7e18127042bda25920052682bf21175ba996b7510cdc5c99c3e5e2f95d2099d5f70"}}, &(0x7f0000000000)={0x0, 0x22, 0x1c, {[@global=@item_012={0x1, 0x1, 0x6, '&'}, @local=@item_012={0x2, 0x2, 0x8, "a697"}, @local, @local=@item_4={0x3, 0x2, 0xc, "6b5dde89"}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_012={0x2, 0x2, 0x0, "b5b3"}, @local=@item_012={0x2, 0x2, 0x8, "012a"}, @main=@item_4={0x3, 0x0, 0xb, "e84e9853"}, @global=@item_4={0x3, 0x1, 0x4, "b4c9dca9"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x9, 0x1, {0x22, 0x85c}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x21, 0x27, "85b1ed1706e8b357a06cc67fc4193cf5b2238570097270a32eafe10e8162b6c02ede75b143ba93"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x1, 0xa1, "e60aa82c9aaae6038e215fc7e446bf3e71f92d99a4ad3c71a8c2841dd73582139a845173cf08974bdd69c35d0c26fc93e347981c8d245dcaa4fbbca88c59c4460e47cb0aeb7f9c069ff805bb0d1f9c2f452be1263458c0d337134f1954f4c42215e7a0fa2eb6ec72cb2a08dfd1a00d26af8ddac578c0ad41539081b71479445a038a3c87dfe50c89f4560b114257efd18c553e397173d92a043b61309345da6c6a"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xe6}}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:39:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x280, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:10 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2301.876759][ T3323] xt_limit: Overflow, try lower: 1241513984/7 [ 2302.033868][ T3323] vlan2: entered promiscuous mode [ 2302.059861][ T3323] macvtap0: entered promiscuous mode [ 2302.077545][ T3323] vlan2: entered allmulticast mode [ 2302.091022][ T3323] macvtap0: entered allmulticast mode [ 2302.105772][ T3323] veth0_macvtap: entered allmulticast mode [ 2302.143284][ T3323] macvtap0: left allmulticast mode [ 2302.152059][ T3323] veth0_macvtap: left allmulticast mode [ 2302.169451][ T3323] macvtap0: left promiscuous mode [ 2302.282823][T30563] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2302.492805][T30563] usb 5-1: device descriptor read/64, error 18 [ 2302.772930][T30563] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2303.014309][T30563] usb 5-1: device descriptor read/64, error 18 [ 2303.145946][T30563] usb usb5-port1: attempt power cycle [ 2303.552875][T30563] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2303.753060][T30563] usb 5-1: device descriptor read/8, error -61 18:39:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x0, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:12 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xeaf82, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:39:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x286, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x280, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:12 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x18, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2304.042968][T30563] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2304.068557][ T3339] xt_limit: Overflow, try lower: 1241513984/7 [ 2304.077080][ T3340] xt_limit: Overflow, try lower: 1241513984/7 [ 2304.145961][ T3343] hub 9-0:1.0: USB hub found [ 2304.162114][ T3343] hub 9-0:1.0: 8 ports detected [ 2304.219945][ T3336] vlan2: entered promiscuous mode [ 2304.225555][T30563] usb 5-1: device descriptor read/8, error -61 [ 2304.266641][ T3336] macvtap0: entered promiscuous mode [ 2304.272464][ T3336] vlan2: entered allmulticast mode [ 2304.278217][ T3336] macvtap0: entered allmulticast mode [ 2304.290845][ T3336] veth0_macvtap: entered allmulticast mode [ 2304.306632][ T3336] macvtap0: left allmulticast mode [ 2304.313571][ T3336] veth0_macvtap: left allmulticast mode [ 2304.319823][ T3336] macvtap0: left promiscuous mode [ 2304.343153][T30563] usb usb5-port1: unable to enumerate USB device 18:39:13 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x0, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x2a0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2304.738512][ T3358] xt_limit: Overflow, try lower: 1241513984/7 18:39:13 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="4024cb000000cb0e2597e50675989510e3b0ac695f26c551c13872b2b54e09a602c6e0b89c646cb12ef31c0a8f440cc6531e005bc3a1cb076804c58fdafa59c66aff8442f9317187d63eb1b9e51c350576a5cb7e6da75f55e91290e66520fa2664c3b2278509c2737098120d05994c7e9e7b41a31bff5bf65fcf6fa8e3078045a313649710afa1ae26be6052f2e4395177b9d097e134a55f67badddd69132c5af36ed81927e9ba8bdb733d361473a664272c82bf0b06956a7430f08136c1cb04b73e1ad165ef940503f6ebcfb78adf9fdedd2b1f8699eefe45"], &(0x7f0000000140)={0x0, 0x3, 0x70, @string={0x70, 0x3, "e871a6196d0d74408d745c7448c04e9dd5b1802dd935881e7463129c1735bb404cf72090afce4862266bff20002dc2dabd3829cc3c3d5313f21e05d679e89b013d2052ca4df08b81fbea49e913d441924f792a1e8f07d26bd6617ac19c1e84f3a4aaaa979efb27ca650530e54adc"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0xb, 0x9, 0x8, "08e56685", "3f5e053f"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x0, 0x40, 0x80, 0x3f, 0xd0, 0x8000}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x37, 0x50, "69c88975fe21811e858ced6da1af37c625ae1be00ced7ac33ec6ccc84f5abb6bbc5f63a21f4d320ef5fc61a5a84911cbda83535362ec5118d19dc6365a9a07c2c85ac529541745de50bbb38a48cc23a3"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3a}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000040)=ANY=[@ANYBLOB="aa0f288c15e6a4842fffffffffc5eed8e660d0c378c333f54bc60ce5a33f7863c50876dfb663e7eccfb75ce97323a9d9ed6fe93dc86b1b8b28aaf7cbb1604f22992db814abaf6515138cf85d70"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, "63d9"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="9a79fe5493e3"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d5f3"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3f}}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000853704081d0620c01507000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "cd8e4e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x20, 0x8, 0x4c, {0x4c, 0x20, "d3b408045283942d59d93aa84fbac5a748c20ff948c299989403009182b9d06d8f7dbd901dec6d2957224e8d2423c1e6a841a91f1c814d1f310d465cf371cf318d099057c87473038c41"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000280)={0x0, 0x22, 0x1b, {[@local=@item_4={0x3, 0x2, 0x2, "63634eb9"}, @main=@item_4={0x3, 0x0, 0x0, "1df85157"}, @local=@item_012={0x2, 0x2, 0x5, "e82a"}, @main=@item_4={0x3, 0x0, 0x4, "33adce10"}, @main=@item_012={0x1, 0x0, 0x9, "f8"}, @main=@item_012={0x1, 0x0, 0x8, 'c'}, @global=@item_4={0x3, 0x1, 0x4, "bdf2ceca"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0xfd, 0x1, {0x22, 0xb3d}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000540)={0x20, 0x19, 0x1d, "42af05f1f964ac1927ae9ed7f281dfe3830ddd893dd2fc008b36bf54d1"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b40)={0x20, 0x1, 0x45, "b6bcd9252f1b5e52111311a302db6210a85ba1e07f34c21588da8dfb164b3aa4f95c10662d5888e1f1a1a8d302f5e594485f6514db6ee449bc5ccc0b31abfaafc1ed20a2b3"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x5e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:39:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x0, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2305.076034][ T3358] vlan2: entered promiscuous mode [ 2305.081642][ T3358] macvtap0: entered promiscuous mode [ 2305.088083][ T3358] vlan2: entered allmulticast mode [ 2305.098953][ T3358] macvtap0: entered allmulticast mode [ 2305.116608][ T3358] veth0_macvtap: entered allmulticast mode [ 2305.141815][ T3358] macvtap0: left allmulticast mode [ 2305.154301][ T3358] veth0_macvtap: left allmulticast mode [ 2305.168983][ T3358] macvtap0: left promiscuous mode 18:39:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x2a4, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2305.362917][ T5209] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2305.504816][ T3371] xt_limit: Overflow, try lower: 1241513984/7 [ 2305.577413][ T3371] vlan2: entered promiscuous mode [ 2305.591039][ T3371] macvtap0: entered promiscuous mode [ 2305.597415][ T3371] vlan2: entered allmulticast mode [ 2305.603238][ T3371] macvtap0: entered allmulticast mode [ 2305.608842][ T3371] veth0_macvtap: entered allmulticast mode [ 2305.622253][ T3371] macvtap0: left allmulticast mode [ 2305.627924][ T3371] veth0_macvtap: left allmulticast mode [ 2305.634327][ T3371] macvtap0: left promiscuous mode 18:39:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x2bc, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2305.733352][ T5209] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2305.751179][ T5209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.791458][ T5209] usb 5-1: config 0 descriptor?? [ 2305.879315][ T3375] xt_limit: Overflow, try lower: 1241513984/7 [ 2306.061241][ T3373] vlan2: entered promiscuous mode [ 2306.072914][ T3373] macvtap0: entered promiscuous mode [ 2306.084842][ T3373] vlan2: entered allmulticast mode [ 2306.110456][ T3373] macvtap0: entered allmulticast mode [ 2306.137093][ T3373] veth0_macvtap: entered allmulticast mode [ 2306.177891][ T3373] macvtap0: left allmulticast mode [ 2306.190268][ T3373] veth0_macvtap: left allmulticast mode [ 2306.208790][ T3373] macvtap0: left promiscuous mode [ 2306.254516][ T3364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2306.273210][ T5209] ath6kl: Failed to read usb control message: -32 [ 2306.280186][ T3364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2306.290113][ T5209] ath6kl: Unable to read the bmi data from the device: -32 [ 2306.312830][ T5209] ath6kl: Unable to recv target info: -32 18:39:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x2f6, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2306.604938][ T3379] xt_limit: Overflow, try lower: 1241513984/7 [ 2306.689269][ T3378] vlan2: entered promiscuous mode [ 2306.700326][ T3378] macvtap0: entered promiscuous mode [ 2306.733610][ T3378] vlan2: entered allmulticast mode [ 2306.764771][ T3378] macvtap0: entered allmulticast mode [ 2306.802836][ T3378] veth0_macvtap: entered allmulticast mode [ 2306.925505][ T3378] macvtap0: left allmulticast mode [ 2306.930968][ T3378] veth0_macvtap: left allmulticast mode [ 2306.949337][ T3378] macvtap0: left promiscuous mode [ 2307.004108][ T5209] ath6kl: Failed to init ath6kl core: -32 18:39:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2307.199536][ T5209] ath6kl_usb: probe of 5-1:0.0 failed with error -32 [ 2307.309655][ T3382] xt_limit: Overflow, try lower: 1241513984/7 [ 2307.405755][ T3381] vlan2: entered promiscuous mode [ 2307.430828][ T3381] macvtap0: entered promiscuous mode [ 2307.448083][ T3381] vlan2: entered allmulticast mode [ 2307.466993][ T3381] macvtap0: entered allmulticast mode [ 2307.491944][ T3381] veth0_macvtap: entered allmulticast mode [ 2307.549505][ T3381] macvtap0: left allmulticast mode [ 2307.554972][ T3381] veth0_macvtap: left allmulticast mode [ 2307.574152][ T3381] macvtap0: left promiscuous mode [ 2307.949316][T17965] usb 5-1: USB disconnect, device number 13 18:39:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xeafe8, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:39:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x302, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:19 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="4024cb000000cb0e2597e50675989510e3b0ac695f26c551c13872b2b54e09a602c6e0b89c646cb12ef31c0a8f440cc6531e005bc3a1cb076804c58fdafa59c66aff8442f9317187d63eb1b9e51c350576a5cb7e6da75f55e91290e66520fa2664c3b2278509c2737098120d05994c7e9e7b41a31bff5bf65fcf6fa8e3078045a313649710afa1ae26be6052f2e4395177b9d097e134a55f67badddd69132c5af36ed81927e9ba8bdb733d361473a664272c82bf0b06956a7430f08136c1cb04b73e1ad165ef940503f6ebcfb78adf9fdedd2b1f8699eefe45"], &(0x7f0000000140)={0x0, 0x3, 0x70, @string={0x70, 0x3, "e871a6196d0d74408d745c7448c04e9dd5b1802dd935881e7463129c1735bb404cf72090afce4862266bff20002dc2dabd3829cc3c3d5313f21e05d679e89b013d2052ca4df08b81fbea49e913d441924f792a1e8f07d26bd6617ac19c1e84f3a4aaaa979efb27ca650530e54adc"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0xb, 0x9, 0x8, "08e56685", "3f5e053f"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x0, 0x40, 0x80, 0x3f, 0xd0, 0x8000}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x37, 0x50, "69c88975fe21811e858ced6da1af37c625ae1be00ced7ac33ec6ccc84f5abb6bbc5f63a21f4d320ef5fc61a5a84911cbda83535362ec5118d19dc6365a9a07c2c85ac529541745de50bbb38a48cc23a3"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3a}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000040)=ANY=[@ANYBLOB="aa0f288c15e6a4842fffffffffc5eed8e660d0c378c333f54bc60ce5a33f7863c50876dfb663e7eccfb75ce97323a9d9ed6fe93dc86b1b8b28aaf7cbb1604f22992db814abaf6515138cf85d70"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, "63d9"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="9a79fe5493e3"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d5f3"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3f}}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000853704081d0620c01507000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "cd8e4e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x20, 0x8, 0x4c, {0x4c, 0x20, "d3b408045283942d59d93aa84fbac5a748c20ff948c299989403009182b9d06d8f7dbd901dec6d2957224e8d2423c1e6a841a91f1c814d1f310d465cf371cf318d099057c87473038c41"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000280)={0x0, 0x22, 0x1b, {[@local=@item_4={0x3, 0x2, 0x2, "63634eb9"}, @main=@item_4={0x3, 0x0, 0x0, "1df85157"}, @local=@item_012={0x2, 0x2, 0x5, "e82a"}, @main=@item_4={0x3, 0x0, 0x4, "33adce10"}, @main=@item_012={0x1, 0x0, 0x9, "f8"}, @main=@item_012={0x1, 0x0, 0x8, 'c'}, @global=@item_4={0x3, 0x1, 0x4, "bdf2ceca"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0xfd, 0x1, {0x22, 0xb3d}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000540)={0x20, 0x19, 0x1d, "42af05f1f964ac1927ae9ed7f281dfe3830ddd893dd2fc008b36bf54d1"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b40)={0x20, 0x1, 0x45, "b6bcd9252f1b5e52111311a302db6210a85ba1e07f34c21588da8dfb164b3aa4f95c10662d5888e1f1a1a8d302f5e594485f6514db6ee449bc5ccc0b31abfaafc1ed20a2b3"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x5e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="4024cb000000cb0e2597e50675989510e3b0ac695f26c551c13872b2b54e09a602c6e0b89c646cb12ef31c0a8f440cc6531e005bc3a1cb076804c58fdafa59c66aff8442f9317187d63eb1b9e51c350576a5cb7e6da75f55e91290e66520fa2664c3b2278509c2737098120d05994c7e9e7b41a31bff5bf65fcf6fa8e3078045a313649710afa1ae26be6052f2e4395177b9d097e134a55f67badddd69132c5af36ed81927e9ba8bdb733d361473a664272c82bf0b06956a7430f08136c1cb04b73e1ad165ef940503f6ebcfb78adf9fdedd2b1f8699eefe45"], &(0x7f0000000140)={0x0, 0x3, 0x70, @string={0x70, 0x3, "e871a6196d0d74408d745c7448c04e9dd5b1802dd935881e7463129c1735bb404cf72090afce4862266bff20002dc2dabd3829cc3c3d5313f21e05d679e89b013d2052ca4df08b81fbea49e913d441924f792a1e8f07d26bd6617ac19c1e84f3a4aaaa979efb27ca650530e54adc"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0xb, 0x9, 0x8, "08e56685", "3f5e053f"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x0, 0x40, 0x80, 0x3f, 0xd0, 0x8000}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x37, 0x50, "69c88975fe21811e858ced6da1af37c625ae1be00ced7ac33ec6ccc84f5abb6bbc5f63a21f4d320ef5fc61a5a84911cbda83535362ec5118d19dc6365a9a07c2c85ac529541745de50bbb38a48cc23a3"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3a}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000040)=ANY=[@ANYBLOB="aa0f288c15e6a4842fffffffffc5eed8e660d0c378c333f54bc60ce5a33f7863c50876dfb663e7eccfb75ce97323a9d9ed6fe93dc86b1b8b28aaf7cbb1604f22992db814abaf6515138cf85d70"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, "63d9"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="9a79fe5493e3"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d5f3"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3f}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000853704081d0620c01507000000010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "cd8e4e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x20, 0x8, 0x4c, {0x4c, 0x20, "d3b408045283942d59d93aa84fbac5a748c20ff948c299989403009182b9d06d8f7dbd901dec6d2957224e8d2423c1e6a841a91f1c814d1f310d465cf371cf318d099057c87473038c41"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000280)={0x0, 0x22, 0x1b, {[@local=@item_4={0x3, 0x2, 0x2, "63634eb9"}, @main=@item_4={0x3, 0x0, 0x0, "1df85157"}, @local=@item_012={0x2, 0x2, 0x5, "e82a"}, @main=@item_4={0x3, 0x0, 0x4, "33adce10"}, @main=@item_012={0x1, 0x0, 0x9, "f8"}, @main=@item_012={0x1, 0x0, 0x8, 'c'}, @global=@item_4={0x3, 0x1, 0x4, "bdf2ceca"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0xfd, 0x1, {0x22, 0xb3d}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000540)={0x20, 0x19, 0x1d, "42af05f1f964ac1927ae9ed7f281dfe3830ddd893dd2fc008b36bf54d1"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b40)={0x20, 0x1, 0x45, "b6bcd9252f1b5e52111311a302db6210a85ba1e07f34c21588da8dfb164b3aa4f95c10662d5888e1f1a1a8d302f5e594485f6514db6ee449bc5ccc0b31abfaafc1ed20a2b3"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x5e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 2310.869206][ T3391] xt_limit: Overflow, try lower: 1241513984/7 [ 2311.027025][ T3391] vlan2: entered promiscuous mode [ 2311.051420][ T3391] macvtap0: entered promiscuous mode [ 2311.079030][ T3391] vlan2: entered allmulticast mode [ 2311.084496][T30558] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2311.121561][ T3391] macvtap0: entered allmulticast mode [ 2311.152445][ T3391] veth0_macvtap: entered allmulticast mode [ 2311.210941][ T3391] macvtap0: left allmulticast mode [ 2311.233185][ T3391] veth0_macvtap: left allmulticast mode [ 2311.251392][ T3391] macvtap0: left promiscuous mode [ 2311.483099][T30558] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2311.528801][T30558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:39:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x312, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2311.603100][T30558] usb 5-1: config 0 descriptor?? 18:39:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x48, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:20 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x0, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xeafe9, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) [ 2311.717070][ T3404] xt_limit: Overflow, try lower: 1241513984/7 [ 2311.850194][ T3406] hub 9-0:1.0: USB hub found [ 2311.855314][ T3406] hub 9-0:1.0: 8 ports detected [ 2311.890087][ T3404] vlan2: entered promiscuous mode [ 2311.930359][ T3404] macvtap0: entered promiscuous mode [ 2311.971574][ T3404] vlan2: entered allmulticast mode [ 2311.981177][ T3404] macvtap0: entered allmulticast mode [ 2311.987253][ T3404] veth0_macvtap: entered allmulticast mode [ 2311.997505][ T3404] macvtap0: left allmulticast mode [ 2312.003174][ T3404] veth0_macvtap: left allmulticast mode [ 2312.009025][ T3404] macvtap0: left promiscuous mode [ 2312.094156][ T3388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2312.103121][ T3388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2312.112919][T30558] ath6kl: Failed to read usb control message: -32 [ 2312.120880][T30558] ath6kl: Unable to read the bmi data from the device: -32 18:39:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x314, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2312.184415][T30558] ath6kl: Unable to recv target info: -32 [ 2312.420191][ T3426] xt_limit: Overflow, try lower: 1241513984/7 [ 2312.522320][ T3428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 18:39:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x312, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2312.564870][ T3428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2312.603136][ T3426] vlan2: entered promiscuous mode 18:39:21 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="4024cb000000cb0e2597e50675989510e3b0ac695f26c551c13872b2b54e09a602c6e0b89c646cb12ef31c0a8f440cc6531e005bc3a1cb076804c58fdafa59c66aff8442f9317187d63eb1b9e51c350576a5cb7e6da75f55e91290e66520fa2664c3b2278509c2737098120d05994c7e9e7b41a31bff5bf65fcf6fa8e3078045a313649710afa1ae26be6052f2e4395177b9d097e134a55f67badddd69132c5af36ed81927e9ba8bdb733d361473a664272c82bf0b06956a7430f08136c1cb04b73e1ad165ef940503f6ebcfb78adf9fdedd2b1f8699eefe45"], &(0x7f0000000140)={0x0, 0x3, 0x70, @string={0x70, 0x3, "e871a6196d0d74408d745c7448c04e9dd5b1802dd935881e7463129c1735bb404cf72090afce4862266bff20002dc2dabd3829cc3c3d5313f21e05d679e89b013d2052ca4df08b81fbea49e913d441924f792a1e8f07d26bd6617ac19c1e84f3a4aaaa979efb27ca650530e54adc"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0xb, 0x9, 0x8, "08e56685", "3f5e053f"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x0, 0x40, 0x80, 0x3f, 0xd0, 0x8000}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x37, 0x50, "69c88975fe21811e858ced6da1af37c625ae1be00ced7ac33ec6ccc84f5abb6bbc5f63a21f4d320ef5fc61a5a84911cbda83535362ec5118d19dc6365a9a07c2c85ac529541745de50bbb38a48cc23a3"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3a}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000040)=ANY=[@ANYBLOB="aa0f288c15e6a4842fffffffffc5eed8e660d0c378c333f54bc60ce5a33f7863c50876dfb663e7eccfb75ce97323a9d9ed6fe93dc86b1b8b28aaf7cbb1604f22992db814abaf6515138cf85d70"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, "63d9"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="9a79fe5493e3"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d5f3"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3f}}) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="4024cb000000cb0e2597e50675989510e3b0ac695f26c551c13872b2b54e09a602c6e0b89c646cb12ef31c0a8f440cc6531e005bc3a1cb076804c58fdafa59c66aff8442f9317187d63eb1b9e51c350576a5cb7e6da75f55e91290e66520fa2664c3b2278509c2737098120d05994c7e9e7b41a31bff5bf65fcf6fa8e3078045a313649710afa1ae26be6052f2e4395177b9d097e134a55f67badddd69132c5af36ed81927e9ba8bdb733d361473a664272c82bf0b06956a7430f08136c1cb04b73e1ad165ef940503f6ebcfb78adf9fdedd2b1f8699eefe45"], &(0x7f0000000140)={0x0, 0x3, 0x70, @string={0x70, 0x3, "e871a6196d0d74408d745c7448c04e9dd5b1802dd935881e7463129c1735bb404cf72090afce4862266bff20002dc2dabd3829cc3c3d5313f21e05d679e89b013d2052ca4df08b81fbea49e913d441924f792a1e8f07d26bd6617ac19c1e84f3a4aaaa979efb27ca650530e54adc"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0xb, 0x9, 0x8, "08e56685", "3f5e053f"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x0, 0x40, 0x80, 0x3f, 0xd0, 0x8000}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x37, 0x50, "69c88975fe21811e858ced6da1af37c625ae1be00ced7ac33ec6ccc84f5abb6bbc5f63a21f4d320ef5fc61a5a84911cbda83535362ec5118d19dc6365a9a07c2c85ac529541745de50bbb38a48cc23a3"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3a}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000040)=ANY=[@ANYBLOB="aa0f288c15e6a4842fffffffffc5eed8e660d0c378c333f54bc60ce5a33f7863c50876dfb663e7eccfb75ce97323a9d9ed6fe93dc86b1b8b28aaf7cbb1604f22992db814abaf6515138cf85d70"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, "63d9"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="9a79fe5493e3"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d5f3"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3f}}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000853704081d0620c01507000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "cd8e4e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x20, 0x8, 0x4c, {0x4c, 0x20, "d3b408045283942d59d93aa84fbac5a748c20ff948c299989403009182b9d06d8f7dbd901dec6d2957224e8d2423c1e6a841a91f1c814d1f310d465cf371cf318d099057c87473038c41"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000280)={0x0, 0x22, 0x1b, {[@local=@item_4={0x3, 0x2, 0x2, "63634eb9"}, @main=@item_4={0x3, 0x0, 0x0, "1df85157"}, @local=@item_012={0x2, 0x2, 0x5, "e82a"}, @main=@item_4={0x3, 0x0, 0x4, "33adce10"}, @main=@item_012={0x1, 0x0, 0x9, "f8"}, @main=@item_012={0x1, 0x0, 0x8, 'c'}, @global=@item_4={0x3, 0x1, 0x4, "bdf2ceca"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0xfd, 0x1, {0x22, 0xb3d}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000540)={0x20, 0x19, 0x1d, "42af05f1f964ac1927ae9ed7f281dfe3830ddd893dd2fc008b36bf54d1"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b40)={0x20, 0x1, 0x45, "b6bcd9252f1b5e52111311a302db6210a85ba1e07f34c21588da8dfb164b3aa4f95c10662d5888e1f1a1a8d302f5e594485f6514db6ee449bc5ccc0b31abfaafc1ed20a2b3"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x5e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2312.647121][ T3426] macvtap0: entered promiscuous mode [ 2312.656528][T30558] ath6kl: Failed to init ath6kl core: -32 [ 2312.702146][ T3426] vlan2: entered allmulticast mode [ 2312.734242][ T3426] macvtap0: entered allmulticast mode [ 2312.747248][T30558] ath6kl_usb: probe of 5-1:0.0 failed with error -32 [ 2312.765711][ T3426] veth0_macvtap: entered allmulticast mode [ 2312.772279][T30558] usb 5-1: USB disconnect, device number 14 [ 2312.797854][ T3440] xt_limit: Overflow, try lower: 1241513984/7 [ 2312.811655][ T3439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2312.847993][ T3439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2312.860516][ T3426] macvtap0: left allmulticast mode [ 2312.880071][ T3426] veth0_macvtap: left allmulticast mode [ 2312.901194][ T3426] macvtap0: left promiscuous mode [ 2312.909792][ T3439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2312.944408][ T3439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:39:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x18, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x32a, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2313.192733][T30558] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2313.267819][ T3447] xt_limit: Overflow, try lower: 1241513984/7 [ 2313.343593][ T3447] vlan2: entered promiscuous mode [ 2313.353098][ T3447] macvtap0: entered promiscuous mode [ 2313.363777][ T3447] vlan2: entered allmulticast mode [ 2313.380184][ T3447] macvtap0: entered allmulticast mode [ 2313.404080][ T3447] veth0_macvtap: entered allmulticast mode [ 2313.435013][ T3447] macvtap0: left allmulticast mode [ 2313.451958][ T3447] veth0_macvtap: left allmulticast mode [ 2313.472432][ T3447] macvtap0: left promiscuous mode [ 2313.573002][T30558] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2313.595982][T30558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:39:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x32c, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2313.626361][T30558] usb 5-1: config 0 descriptor?? [ 2313.793462][ T3453] xt_limit: Overflow, try lower: 1241513984/7 [ 2313.884798][T30558] ath6kl: Failed to submit usb control message: -71 [ 2313.891486][T30558] ath6kl: unable to send the bmi data to the device: -71 [ 2313.962544][T30558] ath6kl: Unable to send get target info: -71 [ 2313.978286][ T3453] vlan2: entered promiscuous mode [ 2314.002480][T30558] ath6kl: Failed to init ath6kl core: -71 [ 2314.012561][ T3453] macvtap0: entered promiscuous mode [ 2314.043479][ T3453] vlan2: entered allmulticast mode [ 2314.048755][ T3453] macvtap0: entered allmulticast mode [ 2314.163332][T30558] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 2314.191217][ T3453] veth0_macvtap: entered allmulticast mode [ 2314.208246][T30558] usb 5-1: USB disconnect, device number 15 18:39:23 executing program 4: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x3, r0) add_key$keyring(&(0x7f0000000100), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r0) r1 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000fcffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x20, 0x6, 0xbe, {0xbe, 0x21, "6e4af06ea48902547994afc93b332ca27c83bbf71d6eed8f1e47161de34af3863b14b83e5037a09165390b487c6b95af2a90f59f934be0f6de2eab4e309bd0271c2096ba4465903412572e54340d861afd7e7457b897cad4751b7c9ef4f3c58edc28ef9e4363ef8b0ef4703d6511a66f35309a5f35cb2ba6e9913fc6af846c272dcb143f6bd65291dfbf9b2d0d3b5b94b0106a57b35a7d8f99d70591458f64afda0ec62a7c70549fb54e0bf428be449779ffce703cf5b32f233eeb04"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x0, "65e20293"}, @local=@item_4={0x3, 0x2, 0xa, "8f039d2c"}, @global=@item_012={0x1, 0x1, 0x8, "e2"}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x5, "481b"}, @main=@item_4={0x3, 0x0, 0xc, "5bb71ac5"}, @local=@item_4={0x3, 0x2, 0x0, "dc4bbefd"}, @global=@item_4={0x3, 0x1, 0x6, "48aaedda"}, @local=@item_012={0x2, 0x2, 0x5, "11de"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x80, 0x1, {0x22, 0xafd}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0xc2, "8b4beec507bfc65c9193669ea521051565e8a4c738d0ccf7eec3c2224b1173dbe7e8ac19ba8d830868ba28003aedc9b7aee9f5ab22d48ef9cf79024ffc5ea51d279c03950ac414298f8e8ebadeb7d652e652997281c95359c813a99154a759772cddefad29135b1fd92904bf6aa0a1cc56d2dcc2f75d5c0e1dfcb64f426b9a3fc21c3b46a2b1e1b789fe684b378169029a15d998bf6ca252aebd05f306477a91de003dadfd65850ef5cc1ef2bc962f4038a9b6775c5236bc5a52fe9eefacbd4a10e9"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000440)={0x20, 0x1, 0xed, "921f904ca0d96e1571964336ed8008cf67a4601f045fe2aa10b132c26ad819436cb51e047daf5d70f1a3a9f120b7ff2514987e807fe837563db6d8763a1529f9346142df4d8a830c92b1245c7c0688112b57070ba7021359eca3d815f23128854f3cae985e59bc4c1ae4a8e659382546f3fbaa1a663447b58c92b87555f038a290df11a703e54751a98c4c6e62f08d6547572f81b7b1edf44333686b9c1b55becf82914f74883a8a96478a5e96998b4763848ad9323b212695fd7aff5e4a4881fd4591c8f3561ba6b51003d9a0a61f28241c7d6174e881635ae630e0eaf4666c41fcff0ec43d5be76fc5537e24"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) [ 2314.442244][ T3453] macvtap0: left allmulticast mode [ 2314.498032][ T3453] veth0_macvtap: left allmulticast mode [ 2314.539758][ T3453] macvtap0: left promiscuous mode 18:39:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x2f6, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2315.009142][ T3460] xt_limit: Overflow, try lower: 1241513984/7 18:39:26 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x4c, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:26 executing program 4: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x3, r0) add_key$keyring(&(0x7f0000000100), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0], 0x0) (async) r1 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000fcffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x20, 0x6, 0xbe, {0xbe, 0x21, "6e4af06ea48902547994afc93b332ca27c83bbf71d6eed8f1e47161de34af3863b14b83e5037a09165390b487c6b95af2a90f59f934be0f6de2eab4e309bd0271c2096ba4465903412572e54340d861afd7e7457b897cad4751b7c9ef4f3c58edc28ef9e4363ef8b0ef4703d6511a66f35309a5f35cb2ba6e9913fc6af846c272dcb143f6bd65291dfbf9b2d0d3b5b94b0106a57b35a7d8f99d70591458f64afda0ec62a7c70549fb54e0bf428be449779ffce703cf5b32f233eeb04"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x0, "65e20293"}, @local=@item_4={0x3, 0x2, 0xa, "8f039d2c"}, @global=@item_012={0x1, 0x1, 0x8, "e2"}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x5, "481b"}, @main=@item_4={0x3, 0x0, 0xc, "5bb71ac5"}, @local=@item_4={0x3, 0x2, 0x0, "dc4bbefd"}, @global=@item_4={0x3, 0x1, 0x6, "48aaedda"}, @local=@item_012={0x2, 0x2, 0x5, "11de"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x80, 0x1, {0x22, 0xafd}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0xc2, "8b4beec507bfc65c9193669ea521051565e8a4c738d0ccf7eec3c2224b1173dbe7e8ac19ba8d830868ba28003aedc9b7aee9f5ab22d48ef9cf79024ffc5ea51d279c03950ac414298f8e8ebadeb7d652e652997281c95359c813a99154a759772cddefad29135b1fd92904bf6aa0a1cc56d2dcc2f75d5c0e1dfcb64f426b9a3fc21c3b46a2b1e1b789fe684b378169029a15d998bf6ca252aebd05f306477a91de003dadfd65850ef5cc1ef2bc962f4038a9b6775c5236bc5a52fe9eefacbd4a10e9"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000440)={0x20, 0x1, 0xed, "921f904ca0d96e1571964336ed8008cf67a4601f045fe2aa10b132c26ad819436cb51e047daf5d70f1a3a9f120b7ff2514987e807fe837563db6d8763a1529f9346142df4d8a830c92b1245c7c0688112b57070ba7021359eca3d815f23128854f3cae985e59bc4c1ae4a8e659382546f3fbaa1a663447b58c92b87555f038a290df11a703e54751a98c4c6e62f08d6547572f81b7b1edf44333686b9c1b55becf82914f74883a8a96478a5e96998b4763848ad9323b212695fd7aff5e4a4881fd4591c8f3561ba6b51003d9a0a61f28241c7d6174e881635ae630e0eaf4666c41fcff0ec43d5be76fc5537e24"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) 18:39:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xeafea, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:39:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x334, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:27 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x0, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x3, r0) add_key$keyring(&(0x7f0000000100), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r0) r1 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000fcffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x20, 0x6, 0xbe, {0xbe, 0x21, "6e4af06ea48902547994afc93b332ca27c83bbf71d6eed8f1e47161de34af3863b14b83e5037a09165390b487c6b95af2a90f59f934be0f6de2eab4e309bd0271c2096ba4465903412572e54340d861afd7e7457b897cad4751b7c9ef4f3c58edc28ef9e4363ef8b0ef4703d6511a66f35309a5f35cb2ba6e9913fc6af846c272dcb143f6bd65291dfbf9b2d0d3b5b94b0106a57b35a7d8f99d70591458f64afda0ec62a7c70549fb54e0bf428be449779ffce703cf5b32f233eeb04"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x0, "65e20293"}, @local=@item_4={0x3, 0x2, 0xa, "8f039d2c"}, @global=@item_012={0x1, 0x1, 0x8, "e2"}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x5, "481b"}, @main=@item_4={0x3, 0x0, 0xc, "5bb71ac5"}, @local=@item_4={0x3, 0x2, 0x0, "dc4bbefd"}, @global=@item_4={0x3, 0x1, 0x6, "48aaedda"}, @local=@item_012={0x2, 0x2, 0x5, "11de"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x80, 0x1, {0x22, 0xafd}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0xc2, "8b4beec507bfc65c9193669ea521051565e8a4c738d0ccf7eec3c2224b1173dbe7e8ac19ba8d830868ba28003aedc9b7aee9f5ab22d48ef9cf79024ffc5ea51d279c03950ac414298f8e8ebadeb7d652e652997281c95359c813a99154a759772cddefad29135b1fd92904bf6aa0a1cc56d2dcc2f75d5c0e1dfcb64f426b9a3fc21c3b46a2b1e1b789fe684b378169029a15d998bf6ca252aebd05f306477a91de003dadfd65850ef5cc1ef2bc962f4038a9b6775c5236bc5a52fe9eefacbd4a10e9"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000440)={0x20, 0x1, 0xed, "921f904ca0d96e1571964336ed8008cf67a4601f045fe2aa10b132c26ad819436cb51e047daf5d70f1a3a9f120b7ff2514987e807fe837563db6d8763a1529f9346142df4d8a830c92b1245c7c0688112b57070ba7021359eca3d815f23128854f3cae985e59bc4c1ae4a8e659382546f3fbaa1a663447b58c92b87555f038a290df11a703e54751a98c4c6e62f08d6547572f81b7b1edf44333686b9c1b55becf82914f74883a8a96478a5e96998b4763848ad9323b212695fd7aff5e4a4881fd4591c8f3561ba6b51003d9a0a61f28241c7d6174e881635ae630e0eaf4666c41fcff0ec43d5be76fc5537e24"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) 18:39:27 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xeafeb, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:39:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x60, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2318.566740][ T3492] xt_limit: Overflow, try lower: 1241513984/7 [ 2318.651176][ T3497] hub 9-0:1.0: USB hub found [ 2318.665418][ T3492] vlan2: entered promiscuous mode [ 2318.685261][ T3497] hub 9-0:1.0: 8 ports detected [ 2318.699347][ T3492] macvtap0: entered promiscuous mode [ 2318.721348][ T3492] vlan2: entered allmulticast mode [ 2318.742131][ T3492] macvtap0: entered allmulticast mode [ 2318.773709][ T3492] veth0_macvtap: entered allmulticast mode [ 2318.817730][ T3492] macvtap0: left allmulticast mode [ 2318.857129][ T3492] veth0_macvtap: left allmulticast mode [ 2318.894687][ T3492] macvtap0: left promiscuous mode 18:39:27 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x2, 0x90, 0x59, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "1f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x40, 0xcc}, {0x6, 0x24, 0x1a, 0x2, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x21, 0x6, 0x8, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x45, 0x3ea4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x24}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x1, 0x41}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x20, 0x40, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0xaa, 0x0, 0xff}, 0x95, &(0x7f0000000140)={0x5, 0xf, 0x95, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xd0, 0x5, 0x7, 0xf11, 0x3, [0xcf, 0xff00c0, 0x3ff0, 0xc000, 0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "8eea48262bfd2a7bb5661e78075bc0aa"}, @generic={0x51, 0x10, 0xb, "42ba820c7a92fe8fad9c4563012de5f4e19f7575e94fb0f5fab95edd21195e349e1c068c19e25fe9e3163e01a7ca9d1508747b7b5a368d45064e14c4c138b14ec973ad4b575da87560b5cc2a8eb0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x3, 0x1, 0x800}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2872}}, {0x9e, &(0x7f0000000240)=@string={0x9e, 0x3, "b9d92ea6bf64948e015859cc7a3406d87d12b4fee22e7907b9150fca137fc67a0006e7fc22f93d7394f8468601fdf783784f0fb99bd68ad8fd201327f43212eb646bf02011f6d7068a98e6b79fc5f5410e88841fab982a8350fafce451f20f99bd069298f16dca8a1a8cc121faf7002a92c0c7f47f7b99abad96b844583e7260d916c6d34caf4906d182661674b72fa6d0a4990b023e2d543e497f3b"}}, {0x67, &(0x7f0000000340)=@string={0x67, 0x3, "4385bd6307ef5f0654d94ed9c884ad355774f9963ecfc5f2ced951d6fc294d505139380d013ad8e711b654bbfc8527b11a9fdcc9b3fc7f40f8baf856fda025e6b61c0cb7713a629e2661845078a5fd355fa57c2b6af58cc70a80fc1e5ecb545ad391d4db20"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:39:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x352, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2319.294480][ T3514] xt_limit: Overflow, try lower: 1241513984/7 [ 2319.403626][ T3514] vlan2: entered promiscuous mode [ 2319.418515][ T3514] macvtap0: entered promiscuous mode [ 2319.433129][ T3514] vlan2: entered allmulticast mode [ 2319.442911][ T3514] macvtap0: entered allmulticast mode [ 2319.448530][ T3514] veth0_macvtap: entered allmulticast mode [ 2319.461695][ T3514] macvtap0: left allmulticast mode [ 2319.467559][ T3514] veth0_macvtap: left allmulticast mode [ 2319.473582][T25772] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2319.482841][ T3514] macvtap0: left promiscuous mode 18:39:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x35e, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2319.692899][T25772] usb 5-1: device descriptor read/64, error 18 [ 2319.818768][ T3518] xt_limit: Overflow, try lower: 1241513984/7 [ 2319.846938][ T3518] vlan2: entered promiscuous mode [ 2319.852179][ T3518] macvtap0: entered promiscuous mode [ 2319.862061][ T3518] vlan2: entered allmulticast mode [ 2319.869512][ T3518] macvtap0: entered allmulticast mode [ 2319.875385][ T3518] veth0_macvtap: entered allmulticast mode [ 2319.884258][ T3518] macvtap0: left allmulticast mode [ 2319.889557][ T3518] veth0_macvtap: left allmulticast mode [ 2319.902817][ T3518] macvtap0: left promiscuous mode 18:39:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x360, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2319.982968][T25772] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2320.138025][ T3521] xt_limit: Overflow, try lower: 1241513984/7 [ 2320.188040][ T3521] vlan2: entered promiscuous mode [ 2320.194406][ T3521] macvtap0: entered promiscuous mode [ 2320.200169][ T3521] vlan2: entered allmulticast mode [ 2320.202813][T25772] usb 5-1: device descriptor read/64, error 18 [ 2320.206395][ T3521] macvtap0: entered allmulticast mode [ 2320.218949][ T3521] veth0_macvtap: entered allmulticast mode [ 2320.230471][ T3521] macvtap0: left allmulticast mode [ 2320.236316][ T3521] veth0_macvtap: left allmulticast mode [ 2320.242151][ T3521] macvtap0: left promiscuous mode [ 2320.324214][T25772] usb usb5-port1: attempt power cycle 18:39:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x362, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2320.472424][ T3524] xt_limit: Overflow, try lower: 1241513984/7 [ 2320.547774][ T3524] vlan2: entered promiscuous mode [ 2320.554311][ T3524] macvtap0: entered promiscuous mode [ 2320.570864][ T3524] vlan2: entered allmulticast mode [ 2320.578652][ T3524] macvtap0: entered allmulticast mode [ 2320.585646][ T3524] veth0_macvtap: entered allmulticast mode [ 2320.619685][ T3524] macvtap0: left allmulticast mode [ 2320.639271][ T3524] veth0_macvtap: left allmulticast mode [ 2320.659771][ T3524] macvtap0: left promiscuous mode [ 2320.752768][T25772] usb 5-1: new high-speed USB device number 18 using dummy_hcd 18:39:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x364, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2320.962944][T25772] usb 5-1: device descriptor read/8, error -61 [ 2321.140105][ T3527] xt_limit: Overflow, try lower: 1241513984/7 [ 2321.232868][T25772] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2321.243138][ T3526] vlan2: entered promiscuous mode [ 2321.262313][ T3526] macvtap0: entered promiscuous mode [ 2321.291152][ T3526] vlan2: entered allmulticast mode [ 2321.325098][ T3526] macvtap0: entered allmulticast mode [ 2321.369556][ T3526] veth0_macvtap: entered allmulticast mode [ 2321.411649][ T3526] macvtap0: left allmulticast mode [ 2321.429564][ T3526] veth0_macvtap: left allmulticast mode [ 2321.435911][T25772] usb 5-1: device descriptor read/8, error -61 [ 2321.467467][ T3526] macvtap0: left promiscuous mode [ 2321.563531][T25772] usb usb5-port1: unable to enumerate USB device 18:39:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x378, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:34 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:34 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x2, 0x90, 0x59, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "1f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x40, 0xcc}, {0x6, 0x24, 0x1a, 0x2, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x21, 0x6, 0x8, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x45, 0x3ea4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x24}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x1, 0x41}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x20, 0x40, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0xaa, 0x0, 0xff}, 0x95, &(0x7f0000000140)={0x5, 0xf, 0x95, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xd0, 0x5, 0x7, 0xf11, 0x3, [0xcf, 0xff00c0, 0x3ff0, 0xc000, 0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "8eea48262bfd2a7bb5661e78075bc0aa"}, @generic={0x51, 0x10, 0xb, "42ba820c7a92fe8fad9c4563012de5f4e19f7575e94fb0f5fab95edd21195e349e1c068c19e25fe9e3163e01a7ca9d1508747b7b5a368d45064e14c4c138b14ec973ad4b575da87560b5cc2a8eb0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x3, 0x1, 0x800}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2872}}, {0x9e, &(0x7f0000000240)=@string={0x9e, 0x3, "b9d92ea6bf64948e015859cc7a3406d87d12b4fee22e7907b9150fca137fc67a0006e7fc22f93d7394f8468601fdf783784f0fb99bd68ad8fd201327f43212eb646bf02011f6d7068a98e6b79fc5f5410e88841fab982a8350fafce451f20f99bd069298f16dca8a1a8cc121faf7002a92c0c7f47f7b99abad96b844583e7260d916c6d34caf4906d182661674b72fa6d0a4990b023e2d543e497f3b"}}, {0x67, &(0x7f0000000340)=@string={0x67, 0x3, "4385bd6307ef5f0654d94ed9c884ad355774f9963ecfc5f2ced951d6fc294d505139380d013ad8e711b654bbfc8527b11a9fdcc9b3fc7f40f8baf856fda025e6b61c0cb7713a629e2661845078a5fd355fa57c2b6af58cc70a80fc1e5ecb545ad391d4db20"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:39:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xeafec, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:39:34 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x68, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2325.383907][ T3539] xt_limit: Overflow, try lower: 1241513984/7 [ 2325.466784][ T3543] hub 9-0:1.0: USB hub found [ 2325.495523][ T3539] vlan2: entered promiscuous mode [ 2325.510103][ T3543] hub 9-0:1.0: 8 ports detected [ 2325.510951][ T3539] macvtap0: entered promiscuous mode [ 2325.542758][ T5209] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2325.567501][ T3539] vlan2: entered allmulticast mode [ 2325.590208][ T3539] macvtap0: entered allmulticast mode [ 2325.614914][ T3539] veth0_macvtap: entered allmulticast mode [ 2325.657866][ T3539] macvtap0: left allmulticast mode [ 2325.674587][ T3539] veth0_macvtap: left allmulticast mode [ 2325.690219][ T3539] macvtap0: left promiscuous mode [ 2325.742975][ T5209] usb 5-1: device descriptor read/64, error 18 18:39:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x37c, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2326.012744][ T5209] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2326.115320][ T3558] xt_limit: Overflow, try lower: 1241513984/7 [ 2326.226648][ T5209] usb 5-1: device descriptor read/64, error 18 [ 2326.334812][ T3557] vlan2: entered promiscuous mode [ 2326.363443][ T5209] usb usb5-port1: attempt power cycle [ 2326.422818][ T3557] macvtap0: entered promiscuous mode [ 2326.433404][ T3557] vlan2: entered allmulticast mode [ 2326.439597][ T3557] macvtap0: entered allmulticast mode [ 2326.446110][ T3557] veth0_macvtap: entered allmulticast mode [ 2326.457739][ T3557] macvtap0: left allmulticast mode [ 2326.470220][ T3557] veth0_macvtap: left allmulticast mode [ 2326.478705][ T3557] macvtap0: left promiscuous mode 18:39:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x3b8, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2326.714846][ T3564] xt_limit: Overflow, try lower: 1241513984/7 [ 2326.772855][ T5209] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2326.784758][ T3563] vlan2: entered promiscuous mode [ 2326.790043][ T3563] macvtap0: entered promiscuous mode [ 2326.798038][ T3563] vlan2: entered allmulticast mode [ 2326.807181][ T3563] macvtap0: entered allmulticast mode [ 2326.813101][ T3563] veth0_macvtap: entered allmulticast mode [ 2326.821652][ T3563] macvtap0: left allmulticast mode [ 2326.831094][ T3563] veth0_macvtap: left allmulticast mode [ 2326.837258][ T3563] macvtap0: left promiscuous mode 18:39:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x3ba, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2326.953125][ T5209] usb 5-1: device descriptor read/8, error -61 [ 2327.058929][ T3567] xt_limit: Overflow, try lower: 1241513984/7 [ 2327.086486][ T3567] vlan2: entered promiscuous mode [ 2327.093290][ T3567] macvtap0: entered promiscuous mode [ 2327.099020][ T3567] vlan2: entered allmulticast mode [ 2327.105591][ T3567] macvtap0: entered allmulticast mode [ 2327.111203][ T3567] veth0_macvtap: entered allmulticast mode [ 2327.121614][ T3567] macvtap0: left allmulticast mode [ 2327.127461][ T3567] veth0_macvtap: left allmulticast mode [ 2327.135782][ T3567] macvtap0: left promiscuous mode 18:39:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x3d0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2327.232800][ T5209] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2327.349351][ T3570] xt_limit: Overflow, try lower: 1241513984/7 [ 2327.413453][ T5209] usb 5-1: device descriptor read/8, error -61 [ 2327.542945][ T5209] usb usb5-port1: unable to enumerate USB device [ 2327.560118][ T3569] vlan2: entered promiscuous mode [ 2327.576771][ T3569] macvtap0: entered promiscuous mode [ 2327.640385][ T3569] vlan2: entered allmulticast mode [ 2327.678472][ T3569] macvtap0: entered allmulticast mode [ 2327.716238][ T3569] veth0_macvtap: entered allmulticast mode [ 2327.775340][ T3569] macvtap0: left allmulticast mode [ 2327.780719][ T3569] veth0_macvtap: left allmulticast mode [ 2327.828142][ T3569] macvtap0: left promiscuous mode 18:39:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x3d4, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:37 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x2, 0x90, 0x59, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "1f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x40, 0xcc}, {0x6, 0x24, 0x1a, 0x2, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x21, 0x6, 0x8, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x45, 0x3ea4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x24}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x1, 0x41}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x20, 0x40, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0xaa, 0x0, 0xff}, 0x95, &(0x7f0000000140)={0x5, 0xf, 0x95, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xd0, 0x5, 0x7, 0xf11, 0x3, [0xcf, 0xff00c0, 0x3ff0, 0xc000, 0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "8eea48262bfd2a7bb5661e78075bc0aa"}, @generic={0x51, 0x10, 0xb, "42ba820c7a92fe8fad9c4563012de5f4e19f7575e94fb0f5fab95edd21195e349e1c068c19e25fe9e3163e01a7ca9d1508747b7b5a368d45064e14c4c138b14ec973ad4b575da87560b5cc2a8eb0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x3, 0x1, 0x800}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2872}}, {0x9e, &(0x7f0000000240)=@string={0x9e, 0x3, "b9d92ea6bf64948e015859cc7a3406d87d12b4fee22e7907b9150fca137fc67a0006e7fc22f93d7394f8468601fdf783784f0fb99bd68ad8fd201327f43212eb646bf02011f6d7068a98e6b79fc5f5410e88841fab982a8350fafce451f20f99bd069298f16dca8a1a8cc121faf7002a92c0c7f47f7b99abad96b844583e7260d916c6d34caf4906d182661674b72fa6d0a4990b023e2d543e497f3b"}}, {0x67, &(0x7f0000000340)=@string={0x67, 0x3, "4385bd6307ef5f0654d94ed9c884ad355774f9963ecfc5f2ced951d6fc294d505139380d013ad8e711b654bbfc8527b11a9fdcc9b3fc7f40f8baf856fda025e6b61c0cb7713a629e2661845078a5fd355fa57c2b6af58cc70a80fc1e5ecb545ad391d4db20"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2328.367208][ T3573] xt_limit: Overflow, try lower: 1241513984/7 [ 2328.546082][ T3572] vlan2: entered promiscuous mode [ 2328.568379][ T3572] macvtap0: entered promiscuous mode [ 2328.598726][ T3572] vlan2: entered allmulticast mode [ 2328.628357][ T3572] macvtap0: entered allmulticast mode [ 2328.655170][ T3572] veth0_macvtap: entered allmulticast mode [ 2328.672819][T26375] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2328.709517][ T3572] macvtap0: left allmulticast mode [ 2328.736261][ T3572] veth0_macvtap: left allmulticast mode [ 2328.766519][ T3572] macvtap0: left promiscuous mode [ 2328.882849][T26375] usb 5-1: device descriptor read/64, error 18 [ 2329.152767][T26375] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2329.352910][T26375] usb 5-1: device descriptor read/64, error 18 [ 2329.483595][T26375] usb usb5-port1: attempt power cycle [ 2329.892840][T26375] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2330.073010][T26375] usb 5-1: device descriptor read/8, error -61 [ 2330.362785][T26375] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2330.563359][T26375] usb 5-1: device descriptor read/8, error -61 [ 2330.683333][T26375] usb usb5-port1: unable to enumerate USB device 18:39:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x3fa, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2331.342804][ T3579] xt_limit: Overflow, try lower: 1241513984/7 [ 2331.479166][ T3583] hub 9-0:1.0: USB hub found [ 2331.493121][ T3583] hub 9-0:1.0: 8 ports detected [ 2331.535108][ T3577] vlan2: entered promiscuous mode [ 2331.562860][ T3577] macvtap0: entered promiscuous mode [ 2331.614421][ T3577] vlan2: entered allmulticast mode [ 2331.643269][ T3577] macvtap0: entered allmulticast mode [ 2331.685970][ T3577] veth0_macvtap: entered allmulticast mode [ 2331.738748][ T3577] macvtap0: left allmulticast mode [ 2331.754525][ T3577] veth0_macvtap: left allmulticast mode [ 2331.771441][ T3577] macvtap0: left promiscuous mode 18:39:40 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x68, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:40 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6c, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xa535, 0x2, 0x8, 0x8000}, {0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}, {0x800, 0x0, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 18:39:40 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1038, &(0x7f0000000880)={[{0x2f, 0x4e00, "59c50b8efd3b3a182058d903089d83790734ff75fc3360b51efd1867aaf0d3b8067a36084148dcde96b3d1afb05329"}, {0x1000, 0x4e00, "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"}]}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x3, 0x2e, {0x2e, 0x21, "d15cc6dd36486c9de1f0b2b5177bb2b2d49de3fc902e1ce54c3aba131594cce6c464808feeb9b590d37cfd2a"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xa, "5a9b"}, @global=@item_4={0x3, 0x1, 0x1, "c6cff293"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xb54}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x31, 0xae, "8a385cb04da9ff849084c7a1cd61a7873efdfe32d16f068933ed898209406d51cfdf6ddf67cb02cf5e7ff9171194d4e276bc4ce0ffd67d700368bddbf256c930e6d4d8a715593aa7d515de7497d6fee3178285d09a334ab9190400b42ed5ffccd2dc8b7b65f491ef2c2e3e15d3f4a96ab528fcd03446a106aea21a5af456a49e9fd32ab3eed28ff103d1771a6f2e0740ceb6aaf57f6fdebf7f2f9a9e76dc302b1de7cc51f1df057a39568b3cc532"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000000340)={0x20, 0x1, 0x8e, "95abcdefc372a628f90e914612820b0782d5a795bdaa7b448fa82442e61db91f0f6460104298a4a47546ab9d4b7159c3c7760b20f1c9e61a48ebaa8781a7bb93ea1d0638d5334f19cb8b1c54ade685bfefd698c0e1d0f8422907e17fc4851e54b620fc0390cbc2ddd1144e7a4aa403376d7c629f34d4e7469c7a0b15b25c6ad346434fd213b44c85c777d5ea24f2"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x6}}) 18:39:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 18:39:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xeafed, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) socket$inet(0x2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 18:39:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0xfffa, 0x2, 0x4, 0x7}, {0x8, 0x93, 0x9, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0xffffc000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 2332.202014][ T3593] xt_limit: Overflow, try lower: 1241513984/7 [ 2332.266738][ T3588] vlan2: entered promiscuous mode [ 2332.271879][ T3588] macvtap0: entered promiscuous mode [ 2332.278839][ T3588] vlan2: entered allmulticast mode [ 2332.302860][ T3588] macvtap0: entered allmulticast mode [ 2332.356507][ T3588] veth0_macvtap: entered allmulticast mode [ 2332.388599][ T3606] hub 9-0:1.0: USB hub found [ 2332.397284][ T3606] hub 9-0:1.0: 8 ports detected [ 2332.442942][T25772] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2332.473298][ T3588] macvtap0: left allmulticast mode [ 2332.487758][ T3588] veth0_macvtap: left allmulticast mode [ 2332.522088][ T3588] macvtap0: left promiscuous mode 18:39:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x575, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2332.843177][T25772] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2332.864153][T25772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.897883][T25772] usb 5-1: config 0 descriptor?? [ 2332.927885][ T3618] xt_limit: Overflow, try lower: 1241513984/7 [ 2333.089313][ T3618] vlan2: entered promiscuous mode [ 2333.119226][ T3618] macvtap0: entered promiscuous mode [ 2333.126781][ T3618] vlan2: entered allmulticast mode [ 2333.135515][ T3618] macvtap0: entered allmulticast mode [ 2333.141179][ T3618] veth0_macvtap: entered allmulticast mode [ 2333.152274][ T3618] macvtap0: left allmulticast mode [ 2333.157878][ T3618] veth0_macvtap: left allmulticast mode [ 2333.164873][ T3618] macvtap0: left promiscuous mode 18:39:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000100), 0x50, 0x0, &(0x7f0000000a40)={0x77359400}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x7, @empty}, 0x0, {[0x0, 0x0, 0x7fff, 0x631, 0x0, 0x3]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)=ANY=[@ANYBLOB="54000000684002002bbd7000ffdbdf250a0002002a00000006000700000000000800010000000009100008800c00028005000200000000001c00088018000100e0b723fe00000000000009000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/113, 0x71}], 0x2, &(0x7f0000000640)=""/154, 0x9a}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1, &(0x7f0000000800)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/199, 0xc7}], 0x5, &(0x7f0000000c00)=""/135, 0x87}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000e40)=""/43, 0x2b}], 0x4, &(0x7f0000000ec0)=""/240, 0xf0}, 0x75}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/67, 0x43}], 0x4, &(0x7f00000013c0)=""/91, 0x5b}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/148, 0x94}], 0x4, &(0x7f0000002740)=""/191, 0xbf}, 0x7ff}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000002980)=""/173, 0xad}], 0x4, &(0x7f0000002a80)=""/60, 0x3c}, 0x5}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000003f80)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/72, 0x48}, 0x149}, {{&(0x7f00000040c0)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/111, 0x6f}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/8, 0x8}, 0x8000}], 0x9, 0x20, &(0x7f0000004240)={0x77359400}) syz_io_uring_setup(0x286b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000005c40)=[{{&(0x7f00000015c0)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd=r13, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r15}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 2333.407417][T30938] ------------[ cut here ]------------ [ 2333.413576][T30938] WARNING: CPU: 1 PID: 30938 at drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2333.426249][T30938] Modules linked in: [ 2333.430238][T30938] CPU: 1 PID: 30938 Comm: kworker/1:19 Not tainted 6.3.0-rc2-syzkaller-00050-g9c1bec9c0b08 #0 [ 2333.440567][T30938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 2333.450708][T30938] Workqueue: ath6kl_wq ath6kl_usb_io_comp_work [ 2333.457016][T30938] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2333.463796][T30938] Code: e4 e8 e3 5a 36 04 48 c7 44 24 38 00 00 00 00 e9 66 fa ff ff e8 10 ff b3 fb 8b 9c 24 8c 00 00 00 e9 4b f8 ff ff e8 ff fe b3 fb <0f> 0b 48 c7 c7 a0 15 ee 8a 41 bc ea ff ff ff e8 db 71 fe ff e9 37 [ 2333.483516][T30938] RSP: 0018:ffffc9000bc57ba8 EFLAGS: 00010293 [ 2333.489734][T30938] RAX: 0000000000000000 RBX: ffff888046af0de0 RCX: 0000000000000000 [ 2333.498009][T30938] RDX: ffff8880262f8000 RSI: ffffffff85cee601 RDI: ffff888046af0e50 [ 2333.506169][T30938] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2333.514268][T30938] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801fd66000 [ 2333.522382][T30938] R13: ffff888046af0de0 R14: 0000000000000000 R15: ffff88801fd66920 [ 2333.530633][T30938] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2333.539654][T30938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2333.546340][T30938] CR2: 00007f34341842d8 CR3: 0000000022804000 CR4: 00000000003506e0 [ 2333.554405][T30938] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2333.562573][T30938] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2333.570665][T30938] Call Trace: [ 2333.574051][T30938] [ 2333.577036][T30938] ? skb_dequeue+0x129/0x180 [ 2333.581798][T30938] ? mark_held_locks+0x9f/0xe0 [ 2333.586834][T30938] ? htc_try_send.isra.0+0x2460/0x2460 [ 2333.592497][T30938] ? lockdep_hardirqs_on+0x7d/0x100 [ 2333.598072][T30938] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2333.604016][T30938] ath6kl_usb_io_comp_work+0x122/0x170 [ 2333.609639][T30938] process_one_work+0x991/0x15c0 [ 2333.614694][T30938] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2333.620139][T30938] ? spin_bug+0x1c0/0x1c0 [ 2333.624568][T30938] ? _raw_spin_lock_irq+0x45/0x50 [ 2333.629691][T30938] worker_thread+0x669/0x1090 [ 2333.634501][T30938] ? process_one_work+0x15c0/0x15c0 [ 2333.639818][T30938] kthread+0x2e8/0x3a0 [ 2333.644080][T30938] ? kthread_complete_and_exit+0x40/0x40 [ 2333.651628][T30938] ret_from_fork+0x1f/0x30 [ 2333.656160][T30938] [ 2333.659213][T30938] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2333.666505][T30938] CPU: 1 PID: 30938 Comm: kworker/1:19 Not tainted 6.3.0-rc2-syzkaller-00050-g9c1bec9c0b08 #0 [ 2333.676781][T30938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 2333.686870][T30938] Workqueue: ath6kl_wq ath6kl_usb_io_comp_work [ 2333.693072][T30938] Call Trace: [ 2333.696384][T30938] [ 2333.699343][T30938] dump_stack_lvl+0xd9/0x150 [ 2333.703982][T30938] panic+0x688/0x730 [ 2333.707925][T30938] ? panic_smp_self_stop+0x90/0x90 [ 2333.713093][T30938] ? show_trace_log_lvl+0x285/0x390 [ 2333.718460][T30938] ? ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2333.724656][T30938] check_panic_on_warn+0xb1/0xc0 [ 2333.729638][T30938] __warn+0xf2/0x390 [ 2333.733575][T30938] ? ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2333.739680][T30938] report_bug+0x2da/0x500 [ 2333.744134][T30938] handle_bug+0x3c/0x70 [ 2333.748401][T30938] exc_invalid_op+0x18/0x50 [ 2333.752936][T30938] asm_exc_invalid_op+0x1a/0x20 [ 2333.757829][T30938] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2333.764541][T30938] Code: e4 e8 e3 5a 36 04 48 c7 44 24 38 00 00 00 00 e9 66 fa ff ff e8 10 ff b3 fb 8b 9c 24 8c 00 00 00 e9 4b f8 ff ff e8 ff fe b3 fb <0f> 0b 48 c7 c7 a0 15 ee 8a 41 bc ea ff ff ff e8 db 71 fe ff e9 37 [ 2333.784172][T30938] RSP: 0018:ffffc9000bc57ba8 EFLAGS: 00010293 [ 2333.790272][T30938] RAX: 0000000000000000 RBX: ffff888046af0de0 RCX: 0000000000000000 [ 2333.798269][T30938] RDX: ffff8880262f8000 RSI: ffffffff85cee601 RDI: ffff888046af0e50 [ 2333.806263][T30938] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2333.814363][T30938] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801fd66000 [ 2333.822364][T30938] R13: ffff888046af0de0 R14: 0000000000000000 R15: ffff88801fd66920 [ 2333.830459][T30938] ? ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2333.836564][T30938] ? ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2333.842667][T30938] ? skb_dequeue+0x129/0x180 [ 2333.847309][T30938] ? mark_held_locks+0x9f/0xe0 [ 2333.852098][T30938] ? htc_try_send.isra.0+0x2460/0x2460 [ 2333.857597][T30938] ? lockdep_hardirqs_on+0x7d/0x100 [ 2333.862916][T30938] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2333.868770][T30938] ath6kl_usb_io_comp_work+0x122/0x170 [ 2333.874272][T30938] process_one_work+0x991/0x15c0 [ 2333.879271][T30938] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2333.884711][T30938] ? spin_bug+0x1c0/0x1c0 [ 2333.889083][T30938] ? _raw_spin_lock_irq+0x45/0x50 [ 2333.894397][T30938] worker_thread+0x669/0x1090 [ 2333.899155][T30938] ? process_one_work+0x15c0/0x15c0 [ 2333.904432][T30938] kthread+0x2e8/0x3a0 [ 2333.908537][T30938] ? kthread_complete_and_exit+0x40/0x40 [ 2333.914495][T30938] ret_from_fork+0x1f/0x30 [ 2333.918978][T30938] [ 2333.922345][T30938] Kernel Offset: disabled [ 2333.927095][T30938] Rebooting in 86400 seconds..